last executing test programs: 8.894698779s ago: executing program 3 (id=4791): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000100)) 7.528133913s ago: executing program 3 (id=4803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="ed", 0x5dc}], 0x1}, 0x40000) 6.592869675s ago: executing program 0 (id=4806): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@ll={0x11, 0x17, r6, 0x1, 0xc, 0x6, @multicast}, 0x80, &(0x7f0000002080)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) 6.42984628s ago: executing program 1 (id=4808): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) close(r4) 5.985581101s ago: executing program 4 (id=4810): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0, 0x2218}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xd9, 0x0, &(0x7f0000000980)="63eced8e46dc3f2ddf33c9e9b9860a2daa835ae4495a02cae561af08917f43d40d1aa08afb1ec6e888695d9a06cbf9fbf1520fcbfcd889658236af087dc9d286da1180260699d827a43530c7112a41bea3cefc79acbf46fe6c027ec5b012c90c29100246134dabd29c29b1be8a9df821951b26953c45bf0d0ba987270c9a5f2b7bf9d187ff0f1ebbec4a52b37c7d28bfd770ad54c618d38182f2f1d1bc7576fab5f3f3f9c2f303d4c0efa456af90c386e81970dedd7ad337bbf377e69f012390b81f5e04c65e9a7af9fa161a6c8fbfde81a88e49e6626460be", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r8}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r9, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) close(r2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x44}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3.621623266s ago: executing program 3 (id=4811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000200000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000030900010073797a30000000001400000011000100000000000000005815"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 3.599995796s ago: executing program 2 (id=4812): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r5, 0x1000) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x3c, r4, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc00000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd7000043500000a0001fd2000"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000000b000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001"], 0x24}}, 0x0) 3.486968849s ago: executing program 1 (id=4813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.456997371s ago: executing program 4 (id=4814): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xffffffffffffffee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000009cf0b11800009500000001040000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xff1f, 0x0, 0x0, 0x12}, 0x94) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) write(r1, &(0x7f0000000000)="2a000200010078", 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 3.420192766s ago: executing program 0 (id=4815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 3.250385111s ago: executing program 2 (id=4816): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5505, 0x8b, 0x0, 0x10000009, 'syz0\x00'}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) sendmsg(0xffffffffffffffff, 0x0, 0x20008044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 2.913491108s ago: executing program 4 (id=4817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "9b75f8279d03466f", "18c19be745b431a1b7a6907600", "7d6a63a1", "d749c52a7fa8d9fb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000140)="2e4c6fd4fb0094d48e2c0c18272bf20acb4255bc6e1d1db323bce2331709ad54ed3f2d977d7a3d443687fa979df122f550b338bc2d3873", 0x37}, {&(0x7f0000000180)="0d0d2ae1455fae18d42cdecfe93ad6718df41c262a3823d9c6f13684cd123dadc675d132e277", 0x26}, {&(0x7f0000000240)="aad7a8878a05d95f45da44ee0ecea3c5d08afa", 0x13}, {&(0x7f0000000200)="a4a9b3cfaca98cb6c6b62f", 0xb}, {&(0x7f0000000440)="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", 0xec0}], 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) 2.722607606s ago: executing program 1 (id=4818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x640040f0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.545021079s ago: executing program 0 (id=4819): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.370069422s ago: executing program 3 (id=4820): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x2c}}, 0x0) 2.3262937s ago: executing program 1 (id=4821): unshare(0x24020400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x0, 0xc, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.279466738s ago: executing program 2 (id=4822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x49, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r2) ppoll(&(0x7f0000000280)=[{r2, 0x4b0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x94, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, 0x0, 0x142) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.063302978s ago: executing program 0 (id=4823): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5505, 0x8b, 0x0, 0x10000009, 'syz0\x00'}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) sendmsg(0xffffffffffffffff, 0x0, 0x20008044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 1.968451275s ago: executing program 4 (id=4824): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000080)=[{r0, 0x2218}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xd9, 0x0, &(0x7f0000000980)="63eced8e46dc3f2ddf33c9e9b9860a2daa835ae4495a02cae561af08917f43d40d1aa08afb1ec6e888695d9a06cbf9fbf1520fcbfcd889658236af087dc9d286da1180260699d827a43530c7112a41bea3cefc79acbf46fe6c027ec5b012c90c29100246134dabd29c29b1be8a9df821951b26953c45bf0d0ba987270c9a5f2b7bf9d187ff0f1ebbec4a52b37c7d28bfd770ad54c618d38182f2f1d1bc7576fab5f3f3f9c2f303d4c0efa456af90c386e81970dedd7ad337bbf377e69f012390b81f5e04c65e9a7af9fa161a6c8fbfde81a88e49e6626460be", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r7}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r8, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query, @map_idx, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) close(r2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.955315566s ago: executing program 2 (id=4825): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r6, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[], 0x0) syz_genetlink_get_family_id$nl802154(0x0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, 0x0, 0x20000000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000140003002bbd700600dbdf250a019cc8402324c096f85bf75fa65792dd758b9f6ed0453b012a15f1a34b4796d2f7af6a29e9c845e835edb2063906cf2e3321490849cd8db0685a72b77ed25952c450bec38d783560be655adc052126704a9fa5938d9e9d66a4fc485ca734a41ed40a43c5ff5bf5dc5e6878189466e560439c009e169346be2eceff79ade3b403f9d4df388d31be6e20ba6b83d64549a7922e9d5c650046d5f16cbe17176632", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa08000a00010000000800090000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) 1.805532868s ago: executing program 3 (id=4826): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r6, 0x1000) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc00000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd7000043500000a0001fd2000"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff000000000b000000ffffffffffffffff00000000000000000900000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001"], 0x24}}, 0x0) 1.16577671s ago: executing program 1 (id=4827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.059852603s ago: executing program 0 (id=4828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x8, 0x8, 0xfbee}, 0x8000001, 0x0, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 998.662022ms ago: executing program 4 (id=4829): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x18, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x800, 0x1ff, {{0x18, 0x4, 0x2, 0x34, 0x60, 0x66, 0x0, 0xf, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0xb7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x47, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @local, @multicast1, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x7, 0x6, [@remote]}, @lsrr={0x83, 0x13, 0x2d, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast]}, @end]}}}}}) bind$packet(r1, &(0x7f0000000480)={0x11, 0x1, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x78ba}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109700000000001d400500000000004704000001ed000007030000000000002c440000000000006b0a00fe000000007303000000000000b500fdff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) read(r1, &(0x7f0000000200)=""/191, 0xbf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 934.554099ms ago: executing program 2 (id=4830): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 840.245943ms ago: executing program 2 (id=4831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 669.870344ms ago: executing program 3 (id=4832): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x9, 0xff, 0x16c0, 0x5505, 0x8b, 0x0, 0x10000009, 'syz0\x00'}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0x0, 0x0, 0xa1}, 0xfec3) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105) sendmsg(0xffffffffffffffff, 0x0, 0x20008044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff00006a1724ef456949140001f0ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x1}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x0, 0x4, {0x3, 0x6}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xc, {0x1, 0x6}}, {0x23b, 0x2, {0x2, 0x4}}, {0x810, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x9, 0x7fff, {0x2, 0x2}}, {0x80, 0x8000, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0x100}}, {0x0, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x2, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x4, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2, 0x9fa5}}, {0x824b, 0x5, {0x0, 0x9}}, {0x200, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x28, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x3, 0xfffffffe}}, {0x6, 0xc62a, {0x1, 0x2}}, {0xffff, 0x7ff, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 506.641593ms ago: executing program 0 (id=4833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a800a8880000990000", 0x20, 0x0, &(0x7f0000000100)={0x11, 0x8100, r5, 0x1, 0xc, 0x6, @random="fa728e2c0cf3"}, 0x14) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000000)) 469.291212ms ago: executing program 1 (id=4834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x18080, 0x4d3b897f6247ab3f}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xfe3, 0x1}}]}]}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x48080) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x1404, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x8000) ioctl(r4, 0x8921, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', r3, 0x20, 0x700, 0x9, 0x6, {{0x16, 0x4, 0x3, 0x20, 0x58, 0x66, 0x0, 0x2, 0x29, 0x0, @local, @empty, {[@generic={0x44, 0x6, "a70a116a"}, @noop, @timestamp_addr={0x44, 0x3c, 0x6b, 0x1, 0x3, [{@broadcast, 0xea}, {@rand_addr=0x64010100, 0xfffffff8}, {@loopback, 0xffffffff}, {@private=0xa010101, 0x6}, {@multicast1, 0x36}, {@multicast2, 0xffffff24}, {@broadcast, 0xc}]}]}}}}}) r7 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000000)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0) recvfrom$packet(r7, &(0x7f0000000400)=""/223, 0xdf, 0x40, &(0x7f0000000500)={0x11, 0x17, r6, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 0s ago: executing program 4 (id=4835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x49, 0x4, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) unshare(0x22020400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r2) ppoll(&(0x7f0000000280)=[{r2, 0x4b0}], 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000003c0), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000003c0), &(0x7f0000000300)=@tcp, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x94, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r5, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, 0x0, 0x142) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) kernel console output (not intermixed with test programs): please check. [ 581.010714][T17322] xt_CT: No such helper "snmp" [ 581.042408][ C0] syz_tun: tun_net_xmit 90 [ 582.081012][ C0] syz_tun: tun_net_xmit 90 [ 582.922790][T17409] __nla_validate_parse: 12 callbacks suppressed [ 582.922815][T17409] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2798'. [ 582.922992][T17409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2798'. [ 583.121500][ C0] syz_tun: tun_net_xmit 90 [ 583.621195][T17432] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2805'. [ 583.644504][T17432] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2805'. [ 583.671200][T17432] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 583.694845][T17432] 1ªî{X¹¦: entered allmulticast mode [ 583.697833][T17432] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 583.827095][T17439] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2808'. [ 583.835761][T17439] 1ªî{X¹¦: entered promiscuous mode [ 583.835784][T17439] 1ªî{X¹¦: left allmulticast mode [ 583.888432][T17439] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2808'. [ 583.888570][T17439] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 583.908931][T17439] 0ªî{X¹¦: left promiscuous mode [ 583.908956][T17439] 0ªî{X¹¦: entered allmulticast mode [ 583.929376][T17439] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 583.978540][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 583.978579][T17447] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2811'. [ 584.022812][T17446] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 584.160951][ C0] syz_tun: tun_net_xmit 90 [ 584.209939][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2813'. [ 584.278590][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2814'. [ 584.723091][T17477] 1ªî{X¹¦: entered promiscuous mode [ 584.723116][T17477] 1ªî{X¹¦: left allmulticast mode [ 584.743812][T17477] siw: device registration error -23 [ 584.757805][T17477] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 584.788566][T17477] 0ªî{X¹¦: left promiscuous mode [ 584.788590][T17477] 0ªî{X¹¦: entered allmulticast mode [ 584.790804][T17477] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 585.037146][T17483] 1ªî{X¹¦: left allmulticast mode [ 585.055419][T17483] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 585.068684][T17483] 0ªî{X¹¦: entered allmulticast mode [ 585.076060][T17483] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 585.197935][T17487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.201647][ C0] syz_tun: tun_net_xmit 90 [ 586.241214][ C0] syz_tun: tun_net_xmit 90 [ 586.572332][T17534] No such timeout policy "syz1" [ 586.574426][T17535] block nbd1: server does not support multiple connections per device. [ 586.599220][T17535] block nbd1: shutting down sockets [ 587.130300][T17549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.281558][ C0] syz_tun: tun_net_xmit 90 [ 587.489895][T17566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.609181][T17569] 0ªî{X¹¦: left allmulticast mode [ 587.687666][T17569] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 587.700133][T17569] 1ªî{X¹¦: entered allmulticast mode [ 587.708969][T17569] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 587.789551][T17574] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 587.789728][T17574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 587.981739][T17585] block nbd1: server does not support multiple connections per device. [ 587.984964][T17585] block nbd1: shutting down sockets [ 588.088459][T17589] block nbd1: server does not support multiple connections per device. [ 588.088808][T17589] block nbd1: shutting down sockets [ 588.321033][ C0] syz_tun: tun_net_xmit 90 [ 588.462879][T17600] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 588.720523][T17609] geneve0: entered promiscuous mode [ 588.727484][T17609] geneve0: left promiscuous mode [ 588.817612][T17615] Cannot find add_set index 0 as target [ 588.832917][T17619] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 588.832959][T17619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.866254][T17592] __nla_validate_parse: 10 callbacks suppressed [ 588.866278][T17592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2861'. [ 589.324941][T17636] block nbd1: server does not support multiple connections per device. [ 589.328197][T17636] block nbd1: shutting down sockets [ 589.361805][ C0] syz_tun: tun_net_xmit 90 [ 589.447148][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.545192][T17630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2867'. [ 589.792378][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 589.792430][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 589.835564][T17657] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2874'. [ 589.843724][T17657] 1ªî{X¹¦: entered promiscuous mode [ 589.843748][T17657] 1ªî{X¹¦: left allmulticast mode [ 589.885212][T17657] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2874'. [ 589.885329][T17657] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 589.997906][T17657] 0ªî{X¹¦: left promiscuous mode [ 589.997932][T17657] 0ªî{X¹¦: entered allmulticast mode [ 590.015189][T17657] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 590.333778][T17675] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2881'. [ 590.370760][T17675] 1ªî{X¹¦: left allmulticast mode [ 590.400951][ C0] syz_tun: tun_net_xmit 90 [ 590.662416][T17687] xt_connbytes: Forcing CT accounting to be enabled [ 590.662482][T17687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.703298][T17689] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2888'. [ 590.706844][T17689] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2888'. [ 590.706967][T17689] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 590.742425][T17689] 0ªî{X¹¦: entered allmulticast mode [ 590.744006][T17689] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 591.441420][ C0] syz_tun: tun_net_xmit 90 [ 591.474151][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 592.184808][T17744] netlink: 'syz.0.2910': attribute type 8 has an invalid length. [ 592.316917][T17744] veth7: entered allmulticast mode [ 592.480998][ C0] syz_tun: tun_net_xmit 90 [ 592.771165][T17756] ip6gre1: entered promiscuous mode [ 592.771190][T17756] ip6gre1: entered allmulticast mode [ 593.244791][T17773] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 593.521743][ C0] syz_tun: tun_net_xmit 90 [ 594.561000][ C0] syz_tun: tun_net_xmit 90 [ 594.699985][T17815] block nbd1: server does not support multiple connections per device. [ 594.700375][T17815] block nbd1: shutting down sockets [ 595.137381][T17833] __nla_validate_parse: 5 callbacks suppressed [ 595.137401][T17833] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2933'. [ 595.148625][T17833] 0ªî{X¹¦: entered promiscuous mode [ 595.148648][T17833] 0ªî{X¹¦: left allmulticast mode [ 595.184575][T17833] siw: device registration error -23 [ 595.189221][T17833] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2933'. [ 595.189378][T17833] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 595.214202][T17833] 1ªî{X¹¦: left promiscuous mode [ 595.214225][T17833] 1ªî{X¹¦: entered allmulticast mode [ 595.216520][T17833] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 595.601549][ C0] syz_tun: tun_net_xmit 90 [ 596.319017][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 596.641025][ C0] syz_tun: tun_net_xmit 90 [ 597.682260][ C0] syz_tun: tun_net_xmit 90 [ 598.514839][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 598.721352][ C0] syz_tun: tun_net_xmit 90 [ 598.737845][T17946] geneve0: entered promiscuous mode [ 598.773016][T17946] geneve0: left promiscuous mode [ 598.949831][T17957] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 599.762791][ C0] syz_tun: tun_net_xmit 90 [ 600.384062][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 600.598698][T18010] block nbd1: server does not support multiple connections per device. [ 600.599642][T18010] block nbd1: shutting down sockets [ 600.802103][ C0] syz_tun: tun_net_xmit 90 [ 601.411330][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2999'. [ 601.522847][T18044] block nbd1: server does not support multiple connections per device. [ 601.523242][T18044] block nbd1: shutting down sockets [ 601.746254][T18052] sit0: entered promiscuous mode [ 601.774703][T18052] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3002'. [ 601.841586][ C0] syz_tun: tun_net_xmit 90 [ 601.942492][T18059] netlink: Unknown conntrack attr (0) [ 602.178330][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 602.813992][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 602.870373][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 602.880988][ C0] syz_tun: tun_net_xmit 90 [ 603.181932][T18110] netlink: Unknown conntrack attr (0) [ 603.736000][T18121] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3026'. [ 603.736125][T18121] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 603.748082][T18121] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 603.920343][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 603.921566][ C0] syz_tun: tun_net_xmit 90 [ 604.067776][T18131] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3029'. [ 604.083876][T18134] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3032'. [ 604.321802][T18131] 0ªî{X¹¦: entered promiscuous mode [ 604.321831][T18131] 0ªî{X¹¦: left allmulticast mode [ 604.578735][T18149] netlink: 'syz.1.3035': attribute type 2 has an invalid length. [ 604.802037][T18160] siw: device registration error -23 [ 604.957360][T18161] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 604.961003][ C0] syz_tun: tun_net_xmit 90 [ 604.975936][T18161] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 605.126374][T18168] x_tables: duplicate entry at hook 1 [ 605.280800][T18168] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 606.001546][ C0] syz_tun: tun_net_xmit 90 [ 606.001621][T18182] __nla_validate_parse: 4 callbacks suppressed [ 606.001639][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 606.093602][T18185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3046'. [ 606.093627][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 606.093647][T18185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3046'. [ 606.093660][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 606.093674][T18185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3046'. [ 606.326818][T18192] 8021q: adding VLAN 0 to HW filter on device .` [ 606.398138][T18192] veth1_vlan: left promiscuous mode [ 606.422634][T18192] veth0_vlan: left promiscuous mode [ 606.439863][T18192] veth0_vlan: entered promiscuous mode [ 606.468859][T18192] veth1_vlan: entered promiscuous mode [ 606.540744][T18192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.543183][T18192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.549047][T18192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.549640][T18192] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 606.572750][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.572801][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.572834][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.856754][T18209] siw: device registration error -23 [ 607.040946][ C0] syz_tun: tun_net_xmit 90 [ 607.047888][T18221] netlink: Unknown conntrack attr (0) [ 607.198530][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 607.313932][T18232] block nbd1: server does not support multiple connections per device. [ 607.318429][T18232] block nbd1: shutting down sockets [ 607.655479][T18242] veth0_macvtap: left promiscuous mode [ 607.656761][T18242] veth0_macvtap: entered promiscuous mode [ 607.665326][T18242] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 607.668232][ T5742] bridge0: port 3(vlan0) entered blocking state [ 607.668408][ T5742] bridge0: port 3(vlan0) entered forwarding state [ 607.774088][T18251] netlink: 'syz.3.3069': attribute type 8 has an invalid length. [ 607.776944][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 607.940442][T18251] veth9: entered allmulticast mode [ 608.081667][ C0] syz_tun: tun_net_xmit 90 [ 608.259272][T18266] netlink: Unknown conntrack attr (0) [ 608.291675][T18268] block nbd1: server does not support multiple connections per device. [ 608.292001][T18268] block nbd1: shutting down sockets [ 608.331019][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 608.380637][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3078'. [ 608.719448][T18283] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 608.745067][T18285] block nbd1: server does not support multiple connections per device. [ 608.745389][T18285] block nbd1: shutting down sockets [ 609.120953][ C0] syz_tun: tun_net_xmit 90 [ 609.558487][T18319] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 609.580305][T18319] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 609.974426][T18335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.098510][T18336] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 610.161505][ C0] syz_tun: tun_net_xmit 90 [ 610.899884][T18365] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 611.115422][T18380] __nla_validate_parse: 4 callbacks suppressed [ 611.115444][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 611.200997][ C0] syz_tun: tun_net_xmit 90 [ 611.413153][T18387] siw: device registration error -23 [ 611.415319][T18387] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3120'. [ 611.415439][T18387] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 611.437895][T18387] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 611.579258][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'. [ 611.604701][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'. [ 611.629699][T18395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3122'. [ 611.737539][T18395] 0ªî{X¹¦: entered promiscuous mode [ 611.737565][T18395] 0ªî{X¹¦: left allmulticast mode [ 611.844420][T18402] netlink: 'syz.1.3123': attribute type 31 has an invalid length. [ 612.241378][ C0] syz_tun: tun_net_xmit 90 [ 612.265404][T18419] ip_tables: iptables: counters copy to user failed while replacing table [ 612.766505][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 612.784124][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 613.280940][ C0] syz_tun: tun_net_xmit 90 [ 613.993230][T18480] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3156'. [ 613.995575][T18480] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3156'. [ 613.995717][T18480] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 614.322401][ C0] syz_tun: tun_net_xmit 90 [ 614.418130][T18480] 1ªî{X¹¦: left promiscuous mode [ 614.418155][T18480] 1ªî{X¹¦: entered allmulticast mode [ 614.426561][T18480] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 614.801847][T18494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3162'. [ 615.095833][T18508] block nbd1: server does not support multiple connections per device. [ 615.096157][T18508] block nbd1: shutting down sockets [ 615.361002][ C0] syz_tun: tun_net_xmit 90 [ 616.391923][T18552] __nla_validate_parse: 3 callbacks suppressed [ 616.391956][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'. [ 616.401432][ C0] syz_tun: tun_net_xmit 90 [ 616.541301][T18554] netlink: Unknown conntrack attr (0) [ 616.713982][T18568] block nbd1: server does not support multiple connections per device. [ 616.715046][T18568] block nbd1: shutting down sockets [ 617.149519][T18582] nbd: socks must be embedded in a SOCK_ITEM attr [ 617.255866][T18587] netlink: 'syz.4.3190': attribute type 8 has an invalid length. [ 617.440995][ C0] syz_tun: tun_net_xmit 90 [ 617.582562][T18599] siw: device registration error -23 [ 617.601410][T18600] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3193'. [ 617.646852][T18600] 1ªî{X¹¦: entered promiscuous mode [ 617.646872][T18600] 1ªî{X¹¦: left allmulticast mode [ 617.685639][T18600] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3193'. [ 617.685758][T18600] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 617.697214][T18600] 0ªî{X¹¦: left promiscuous mode [ 617.697237][T18600] 0ªî{X¹¦: entered allmulticast mode [ 617.706268][T18600] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 617.768014][T18603] netlink: Unknown conntrack attr (0) [ 617.895966][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 618.308608][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 618.481680][ C0] syz_tun: tun_net_xmit 90 [ 618.482694][T18633] siw: device registration error -23 [ 618.503527][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 619.075012][T18640] block nbd1: server does not support multiple connections per device. [ 619.075390][T18640] block nbd1: shutting down sockets [ 619.092280][T18643] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3207'. [ 619.092900][T18644] netlink: Unknown conntrack attr (0) [ 619.095115][T18643] 0ªî{X¹¦: entered promiscuous mode [ 619.095138][T18643] 0ªî{X¹¦: left allmulticast mode [ 619.113401][T18643] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3207'. [ 619.113521][T18643] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 619.157521][T18643] 1ªî{X¹¦: left promiscuous mode [ 619.157545][T18643] 1ªî{X¹¦: entered allmulticast mode [ 619.169140][T18643] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 619.520981][ C0] syz_tun: tun_net_xmit 90 [ 619.588372][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 619.683524][T18668] netlink: 'syz.1.3217': attribute type 29 has an invalid length. [ 619.683550][T18668] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3217'. [ 620.396042][T18694] netlink: Unknown conntrack attr (0) [ 620.561479][ C0] syz_tun: tun_net_xmit 90 [ 620.564624][T18701] block nbd1: server does not support multiple connections per device. [ 620.564974][T18701] block nbd1: shutting down sockets [ 621.288045][T18732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 621.384115][T18733] netlink: Unknown conntrack attr (0) [ 621.600980][ C0] syz_tun: tun_net_xmit 90 [ 621.671740][T18747] block nbd1: server does not support multiple connections per device. [ 621.672108][T18747] block nbd1: shutting down sockets [ 622.220333][T18769] netlink: Unknown conntrack attr (0) [ 622.446428][T18777] __nla_validate_parse: 4 callbacks suppressed [ 622.446449][T18777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3248'. [ 622.641962][ C0] syz_tun: tun_net_xmit 90 [ 622.700210][T18787] x_tables: duplicate entry at hook 1 [ 622.832548][T18791] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3253'. [ 622.995376][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3251'. [ 623.125189][T18791] 1ªî{X¹¦: left allmulticast mode [ 623.143893][T18814] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 623.654244][T18829] block nbd1: server does not support multiple connections per device. [ 623.654596][T18829] block nbd1: shutting down sockets [ 623.680939][ C0] syz_tun: tun_net_xmit 90 [ 624.287919][T18839] netlink: 'syz.4.3266': attribute type 9 has an invalid length. [ 624.310293][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 624.601249][T18849] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3269'. [ 624.627295][T18849] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3269'. [ 624.627417][T18849] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 624.651462][T18849] 0ªî{X¹¦: entered allmulticast mode [ 624.652792][T18849] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 624.721503][ C0] syz_tun: tun_net_xmit 90 [ 624.797921][T18862] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3276'. [ 624.810523][T18862] 1ªî{X¹¦: entered promiscuous mode [ 624.810547][T18862] 1ªî{X¹¦: left allmulticast mode [ 624.844501][T18862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3276'. [ 624.844768][T18862] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 624.857313][T18862] 0ªî{X¹¦: left promiscuous mode [ 624.857333][T18862] 0ªî{X¹¦: entered allmulticast mode [ 624.871524][T18862] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 625.337889][T18886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3281'. [ 625.761492][ C0] syz_tun: tun_net_xmit 90 [ 626.131939][T18898] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3285'. [ 626.135508][T18898] siw: device registration error -23 [ 626.138524][T18898] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 626.184252][T18898] 1ªî{X¹¦: left promiscuous mode [ 626.184279][T18898] 1ªî{X¹¦: entered allmulticast mode [ 626.205751][T18898] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 626.301673][T18907] sctp: [Deprecated]: syz.0.3289 (pid 18907) Use of int in max_burst socket option. [ 626.301673][T18907] Use struct sctp_assoc_value instead [ 626.433843][T18908] netlink: Unknown conntrack attr (0) [ 626.801959][ C0] syz_tun: tun_net_xmit 90 [ 626.936868][T18931] block nbd1: server does not support multiple connections per device. [ 626.938965][T18931] block nbd1: shutting down sockets [ 627.413340][T18947] 0ªî{X¹¦: left allmulticast mode [ 627.434862][T18947] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 627.456630][T18947] 1ªî{X¹¦: entered allmulticast mode [ 627.458584][T18947] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 627.676998][T18958] netlink: Unknown conntrack attr (0) [ 627.840995][ C0] syz_tun: tun_net_xmit 90 [ 627.994576][T18972] block nbd1: server does not support multiple connections per device. [ 627.994968][T18972] block nbd1: shutting down sockets [ 628.122526][T18977] __nla_validate_parse: 4 callbacks suppressed [ 628.122549][T18977] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3312'. [ 628.128018][T18977] 1ªî{X¹¦: left allmulticast mode [ 628.159521][T18978] netlink: 'syz.3.3311': attribute type 8 has an invalid length. [ 628.177350][T18977] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3312'. [ 628.177475][T18977] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 628.178353][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 628.186384][T18977] 0ªî{X¹¦: entered allmulticast mode [ 628.199119][T18977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 628.414843][T18988] IPVS: Error connecting to the multicast addr [ 628.577081][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'. [ 628.761250][T19007] tipc: Enabling of bearer rejected, failed to enable media [ 628.881601][ C0] syz_tun: tun_net_xmit 90 [ 629.474947][T19027] x_tables: duplicate entry at hook 1 [ 629.636899][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 629.649106][T19032] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 629.667738][T19035] block nbd1: server does not support multiple connections per device. [ 629.668080][T19035] block nbd1: shutting down sockets [ 629.694710][T19039] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3330'. [ 629.697275][T19039] 1ªî{X¹¦: entered promiscuous mode [ 629.697300][T19039] 1ªî{X¹¦: left allmulticast mode [ 629.727078][T19039] siw: device registration error -23 [ 629.738045][T19039] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3330'. [ 629.738180][T19039] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 629.759555][T19039] 0ªî{X¹¦: left promiscuous mode [ 629.759580][T19039] 0ªî{X¹¦: entered allmulticast mode [ 629.779027][T19039] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 629.921021][ C0] syz_tun: tun_net_xmit 90 [ 629.973082][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3332'. [ 630.220248][T19050] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3337'. [ 630.379382][T19050] 1ªî{X¹¦: entered promiscuous mode [ 630.379411][T19050] 1ªî{X¹¦: left allmulticast mode [ 630.817998][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 630.964245][ C0] syz_tun: tun_net_xmit 90 [ 632.001004][ C0] syz_tun: tun_net_xmit 90 [ 632.046428][T19121] netlink: 'syz.4.3363': attribute type 2 has an invalid length. [ 632.858679][T19153] 0ªî{X¹¦: entered promiscuous mode [ 632.858708][T19153] 0ªî{X¹¦: left allmulticast mode [ 633.041608][ C0] syz_tun: tun_net_xmit 90 [ 634.081024][ C0] syz_tun: tun_net_xmit 90 [ 634.323553][T19179] __nla_validate_parse: 8 callbacks suppressed [ 634.323574][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 634.477637][T19187] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3387'. [ 634.493853][T19187] 1ªî{X¹¦: entered promiscuous mode [ 634.493881][T19187] 1ªî{X¹¦: left allmulticast mode [ 634.524144][T19187] siw: device registration error -23 [ 634.538408][T19187] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3387'. [ 634.538577][T19187] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 634.562423][T19187] 0ªî{X¹¦: left promiscuous mode [ 634.562447][T19187] 0ªî{X¹¦: entered allmulticast mode [ 634.576229][T19187] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 634.820316][T19196] geneve0: entered promiscuous mode [ 634.849826][T19196] geneve0: left promiscuous mode [ 635.112289][T19212] netlink: Unknown conntrack attr (0) [ 635.121496][ C0] syz_tun: tun_net_xmit 90 [ 635.328476][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.396167][T19223] x_tables: duplicate entry at hook 1 [ 635.590844][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 635.716921][T19223] netlink: 'syz.3.3396': attribute type 1 has an invalid length. [ 635.831752][T19237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3400'. [ 636.004998][T19241] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3402'. [ 636.160980][ C0] syz_tun: tun_net_xmit 90 [ 636.262488][T19241] 0ªî{X¹¦: left allmulticast mode [ 636.548060][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 636.649785][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3403'. [ 636.922116][T19263] netlink: Unknown conntrack attr (0) [ 637.041882][T19271] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3411'. [ 637.053626][T19271] 0ªî{X¹¦: entered promiscuous mode [ 637.053651][T19271] 0ªî{X¹¦: left allmulticast mode [ 637.071851][T19271] siw: device registration error -23 [ 637.081472][T19271] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3411'. [ 637.081601][T19271] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 637.094614][T19271] 1ªî{X¹¦: left promiscuous mode [ 637.094639][T19271] 1ªî{X¹¦: entered allmulticast mode [ 637.108825][T19271] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 637.201651][ C0] syz_tun: tun_net_xmit 90 [ 637.433782][T19286] 1ªî{X¹¦: entered promiscuous mode [ 637.433809][T19286] 1ªî{X¹¦: left allmulticast mode [ 637.456661][T19281] siw: device registration error -23 [ 638.215282][T19317] siw: device registration error -23 [ 638.232666][T19317] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 638.241017][ C0] syz_tun: tun_net_xmit 90 [ 638.266699][T19317] 0ªî{X¹¦: left promiscuous mode [ 638.266725][T19317] 0ªî{X¹¦: entered allmulticast mode [ 638.288740][T19317] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 638.405306][T19326] siw: device registration error -23 [ 638.406801][T19326] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 638.447771][T19326] 0ªî{X¹¦: left promiscuous mode [ 638.447797][T19326] 0ªî{X¹¦: entered allmulticast mode [ 638.458427][T19323] netlink: Unknown conntrack attr (0) [ 638.467873][T19326] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 638.501706][T19331] pimreg: tun_chr_ioctl cmd 1074812118 [ 638.762623][T19340] netpci0: tun_chr_ioctl cmd 1074025681 [ 638.804475][T19336] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 638.813855][T19336] 1ªî{X¹¦: left promiscuous mode [ 638.813877][T19336] 1ªî{X¹¦: entered allmulticast mode [ 638.820470][T19336] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 639.070173][T19354] 0ªî{X¹¦: entered promiscuous mode [ 639.070199][T19354] 0ªî{X¹¦: left allmulticast mode [ 639.086125][T19354] siw: device registration error -23 [ 639.100243][T19354] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 639.119881][T19354] 1ªî{X¹¦: left promiscuous mode [ 639.119906][T19354] 1ªî{X¹¦: entered allmulticast mode [ 639.134701][T19354] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 639.282017][ C0] syz_tun: tun_net_xmit 90 [ 639.373363][T19363] __nla_validate_parse: 12 callbacks suppressed [ 639.373386][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 640.217105][T19395] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3449'. [ 640.248217][T19395] 0ªî{X¹¦: entered promiscuous mode [ 640.248245][T19395] 0ªî{X¹¦: left allmulticast mode [ 640.274188][T19397] siw: device registration error -23 [ 640.292855][T19395] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3449'. [ 640.292991][T19395] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 640.307615][T19395] 1ªî{X¹¦: left promiscuous mode [ 640.307636][T19395] 1ªî{X¹¦: entered allmulticast mode [ 640.314852][T19395] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 640.321005][ C0] syz_tun: tun_net_xmit 90 [ 640.563134][T19409] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3453'. [ 641.090398][T19409] 0ªî{X¹¦: entered promiscuous mode [ 641.090426][T19409] 0ªî{X¹¦: left allmulticast mode [ 641.363669][ C0] syz_tun: tun_net_xmit 90 [ 641.905626][T19437] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3462'. [ 641.917200][T19437] siw: device registration error -23 [ 641.920633][T19437] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3462'. [ 641.920820][T19437] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 641.957185][T19437] 1ªî{X¹¦: left promiscuous mode [ 641.957212][T19437] 1ªî{X¹¦: entered allmulticast mode [ 641.964063][T19437] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 642.400934][ C0] syz_tun: tun_net_xmit 90 [ 642.663992][T19453] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3467'. [ 642.668532][T19453] 1ªî{X¹¦: entered promiscuous mode [ 642.668557][T19453] 1ªî{X¹¦: left allmulticast mode [ 642.685912][T19453] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3467'. [ 642.686022][T19453] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 642.708331][T19453] 0ªî{X¹¦: left promiscuous mode [ 642.708355][T19453] 0ªî{X¹¦: entered allmulticast mode [ 642.716391][T19453] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 642.841139][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3469'. [ 642.988396][T19462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3472'. [ 643.337726][ T8136] bridge0: entered promiscuous mode [ 643.441563][ C0] syz_tun: tun_net_xmit 90 [ 643.778158][T19488] siw: device registration error -23 [ 643.886097][T19486] 1ªî{X¹¦: entered promiscuous mode [ 643.886123][T19486] 1ªî{X¹¦: left allmulticast mode [ 643.898607][T19490] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 643.922555][T19490] 0ªî{X¹¦: left promiscuous mode [ 643.922581][T19490] 0ªî{X¹¦: entered allmulticast mode [ 643.928726][T19490] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 644.480937][ C0] syz_tun: tun_net_xmit 90 [ 645.374902][T19517] __nla_validate_parse: 2 callbacks suppressed [ 645.374925][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 645.397344][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'. [ 645.442439][T19518] tap0: tun_chr_ioctl cmd 1074025677 [ 645.442586][T19518] tap0: linktype set to 805 [ 645.521508][ C0] syz_tun: tun_net_xmit 90 [ 646.560934][ C0] syz_tun: tun_net_xmit 90 [ 646.608196][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 647.400564][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3516'. [ 647.413833][T19585] block nbd1: server does not support multiple connections per device. [ 647.433580][T19585] block nbd1: shutting down sockets [ 647.601472][ C0] syz_tun: tun_net_xmit 90 [ 647.665812][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3518'. [ 647.895418][T19599] netlink: 'syz.4.3522': attribute type 2 has an invalid length. [ 648.174503][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3524'. [ 648.207113][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3524'. [ 648.640936][ C0] syz_tun: tun_net_xmit 90 [ 649.471331][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'. [ 649.681440][ C0] syz_tun: tun_net_xmit 90 [ 649.822519][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 649.925342][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'. [ 650.086265][T19649] netlink: Unknown conntrack attr (0) [ 650.412745][T19659] siw: device registration error -23 [ 650.527764][T19658] 1ªî{X¹¦: entered promiscuous mode [ 650.527791][T19658] 1ªî{X¹¦: left allmulticast mode [ 650.721021][ C0] syz_tun: tun_net_xmit 90 [ 651.162766][T19677] __nla_validate_parse: 1 callbacks suppressed [ 651.162788][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'. [ 651.485116][T19685] x_tables: duplicate entry at hook 1 [ 651.600084][T19685] netlink: 'syz.2.3546': attribute type 1 has an invalid length. [ 651.764078][ C0] syz_tun: tun_net_xmit 90 [ 651.786837][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 651.879659][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 652.053750][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 652.089551][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'. [ 652.491143][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 652.755381][T19716] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3556'. [ 652.759811][T19716] 0ªî{X¹¦: entered promiscuous mode [ 652.759838][T19716] 0ªî{X¹¦: left allmulticast mode [ 652.801005][ C0] syz_tun: tun_net_xmit 90 [ 652.814256][T19716] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3556'. [ 652.814376][T19716] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 652.845225][T19716] 1ªî{X¹¦: left promiscuous mode [ 652.845251][T19716] 1ªî{X¹¦: entered allmulticast mode [ 652.847412][T19716] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 653.160694][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 653.239706][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 653.811735][T19755] siw: device registration error -23 [ 653.813191][T19755] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 653.820408][T19755] 0ªî{X¹¦: left promiscuous mode [ 653.820431][T19755] 0ªî{X¹¦: entered allmulticast mode [ 653.842024][ C0] syz_tun: tun_net_xmit 90 [ 653.862944][T19755] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 654.188118][T19763] 1ªî{X¹¦: entered promiscuous mode [ 654.188158][T19763] 1ªî{X¹¦: left allmulticast mode [ 654.557657][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.557973][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.558207][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.584922][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.585179][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.585455][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.587888][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 654.695162][T19781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.881041][ C0] syz_tun: tun_net_xmit 90 [ 655.091636][T19777] net_ratelimit: 891 callbacks suppressed [ 655.091661][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.091892][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.092128][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.093035][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.093313][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.093567][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.094865][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.095139][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.095406][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.097053][T19777] Dead loop on virtual device geneve0 (net 40), fix it urgently! [ 655.903687][T19807] siw: device registration error -23 [ 655.921614][ C0] syz_tun: tun_net_xmit 90 [ 656.190046][T19804] 1ªî{X¹¦: entered promiscuous mode [ 656.190074][T19804] 1ªî{X¹¦: left allmulticast mode [ 656.406290][T19825] block nbd1: server does not support multiple connections per device. [ 656.406655][T19825] block nbd1: shutting down sockets [ 656.591067][T19832] __nla_validate_parse: 4 callbacks suppressed [ 656.591091][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3590'. [ 656.653673][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3590'. [ 656.701299][ T5956] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.702440][ T5956] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.702479][ T5956] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.702541][ T5956] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.960968][ C0] syz_tun: tun_net_xmit 90 [ 656.999342][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 657.605024][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'. [ 658.001591][ C0] syz_tun: tun_net_xmit 90 [ 658.036967][T19869] block nbd1: server does not support multiple connections per device. [ 658.037314][T19869] block nbd1: shutting down sockets [ 658.139348][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3603'. [ 658.556357][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 659.040954][ C0] syz_tun: tun_net_xmit 90 [ 659.109007][T19913] x_tables: duplicate entry at hook 1 [ 659.229880][T19916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3612'. [ 659.257338][T19913] netlink: 'syz.1.3612': attribute type 1 has an invalid length. [ 659.367352][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 659.464300][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 659.524048][T19928] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3615'. [ 659.770224][T19935] xt_hashlimit: size too large, truncated to 1048576 [ 659.834092][T19940] netlink: 'syz.4.3620': attribute type 8 has an invalid length. [ 660.081586][ C0] syz_tun: tun_net_xmit 90 [ 660.751430][T19968] block nbd1: server does not support multiple connections per device. [ 660.751850][T19968] block nbd1: shutting down sockets [ 661.090436][T19983] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 661.098808][T19983] 1ªî{X¹¦: entered allmulticast mode [ 661.109828][T19983] net_ratelimit: 633 callbacks suppressed [ 661.109849][T19983] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 661.121034][ C0] syz_tun: tun_net_xmit 90 [ 661.311913][T19991] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.333760][T19990] netlink: 'syz.2.3631': attribute type 8 has an invalid length. [ 661.656328][T19999] __nla_validate_parse: 4 callbacks suppressed [ 661.656351][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 661.691666][T20005] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3637'. [ 661.691690][T20005] nbd: socks must be embedded in a SOCK_ITEM attr [ 661.691970][T20005] block nbd1: shutting down sockets [ 661.759321][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 661.808482][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3638'. [ 662.167612][ C0] syz_tun: tun_net_xmit 90 [ 662.318048][T20026] block nbd1: server does not support multiple connections per device. [ 662.320380][T20026] block nbd1: shutting down sockets [ 662.637315][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3643'. [ 662.654217][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3643'. [ 663.114547][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 663.200918][ C0] syz_tun: tun_net_xmit 90 [ 663.487833][T20058] netlink: Unknown conntrack attr (0) [ 663.554908][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3651'. [ 664.178913][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 664.180417][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 664.241999][ C0] syz_tun: tun_net_xmit 90 [ 664.510322][T20099] team0: No ports can be present during mode change [ 664.770220][T20107] geneve0: entered promiscuous mode [ 664.796061][T20107] geneve0: left promiscuous mode [ 665.173646][T20127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 665.235448][T20129] 1ªî{X¹¦: left allmulticast mode [ 665.258657][T20129] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 665.268196][T20129] 0ªî{X¹¦: entered allmulticast mode [ 665.269129][T20129] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 665.280974][ C0] syz_tun: tun_net_xmit 90 [ 665.361415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.321633][ C0] syz_tun: tun_net_xmit 90 [ 667.360980][ C0] syz_tun: tun_net_xmit 90 [ 667.415634][T20208] __nla_validate_parse: 9 callbacks suppressed [ 667.415659][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 667.659456][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 667.660806][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 667.861885][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 667.861910][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3699'. [ 668.103001][T20233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3705'. [ 668.237673][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'. [ 668.401577][ C0] syz_tun: tun_net_xmit 90 [ 668.477999][T20249] netlink: 'syz.0.3710': attribute type 8 has an invalid length. [ 668.887032][T20267] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3718'. [ 668.894523][T20267] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3718'. [ 668.894636][T20267] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 669.015871][T20273] x_tables: duplicate entry at hook 1 [ 669.112421][T20267] 0ªî{X¹¦: left promiscuous mode [ 669.112439][T20267] 0ªî{X¹¦: entered allmulticast mode [ 669.113964][T20267] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 669.133543][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'. [ 669.219447][T20273] netlink: 'syz.1.3720': attribute type 1 has an invalid length. [ 669.441005][ C0] syz_tun: tun_net_xmit 90 [ 669.966579][T20304] netlink: Unknown conntrack attr (0) [ 670.481631][ C0] syz_tun: tun_net_xmit 90 [ 670.801297][T20338] geneve0: entered promiscuous mode [ 670.808658][T20338] geneve0: left promiscuous mode [ 671.175879][T20355] netlink: Unknown conntrack attr (0) [ 671.251173][T20365] block nbd1: server does not support multiple connections per device. [ 671.251561][T20365] block nbd1: shutting down sockets [ 671.520997][ C0] syz_tun: tun_net_xmit 90 [ 671.526650][T20378] x_tables: duplicate entry at hook 1 [ 671.684486][T20386] block nbd1: server does not support multiple connections per device. [ 671.686614][T20386] block nbd1: shutting down sockets [ 671.706687][T20383] netlink: 'syz.3.3751': attribute type 1 has an invalid length. [ 672.054778][T20401] ovs-dp0: entered promiscuous mode [ 672.562201][ C0] syz_tun: tun_net_xmit 90 [ 673.171676][T20441] __nla_validate_parse: 4 callbacks suppressed [ 673.171700][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 673.218999][T20443] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 673.600973][ C0] syz_tun: tun_net_xmit 90 [ 674.033992][T20480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3779'. [ 674.034023][T20480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3779'. [ 674.641755][ C0] syz_tun: tun_net_xmit 90 [ 675.004889][T20489] block nbd1: server does not support multiple connections per device. [ 675.005269][T20489] block nbd1: shutting down sockets [ 675.097392][T20497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 675.680914][ C0] syz_tun: tun_net_xmit 90 [ 676.150722][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3796'. [ 676.150753][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3796'. [ 676.598489][T20559] block nbd1: server does not support multiple connections per device. [ 676.610010][T20559] block nbd1: shutting down sockets [ 676.656780][T20551] geneve0: entered promiscuous mode [ 676.667253][T20551] geneve0: left promiscuous mode [ 676.721528][ C0] syz_tun: tun_net_xmit 90 [ 677.760952][ C0] syz_tun: tun_net_xmit 90 [ 677.971471][T20609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3819'. [ 678.142006][T20614] block nbd1: server does not support multiple connections per device. [ 678.142362][T20614] block nbd1: shutting down sockets [ 678.425843][T20629] block nbd1: server does not support multiple connections per device. [ 678.426369][T20629] block nbd1: shutting down sockets [ 678.779020][T20643] netlink: 'syz.3.3829': attribute type 3 has an invalid length. [ 678.801592][ C0] syz_tun: tun_net_xmit 90 [ 679.189026][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 679.189056][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 679.214838][T20658] block nbd1: server does not support multiple connections per device. [ 679.215206][T20658] block nbd1: shutting down sockets [ 679.505112][T20667] xt_hashlimit: size too large, truncated to 1048576 [ 679.743229][T20675] netlink: 'syz.0.3842': attribute type 2 has an invalid length. [ 679.840961][ C0] syz_tun: tun_net_xmit 90 [ 679.887921][T20681] ip_tables: iptables: counters copy to user failed while replacing table [ 680.066732][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'. [ 680.301725][T20697] block nbd1: server does not support multiple connections per device. [ 680.302099][T20697] block nbd1: shutting down sockets [ 680.358020][T20702] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3852'. [ 680.370371][T20702] 0ªî{X¹¦: entered promiscuous mode [ 680.370396][T20702] 0ªî{X¹¦: left allmulticast mode [ 680.401589][T20702] siw: device registration error -23 [ 680.407553][T20702] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3852'. [ 680.407678][T20702] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 680.436511][T20702] 1ªî{X¹¦: left promiscuous mode [ 680.436535][T20702] 1ªî{X¹¦: entered allmulticast mode [ 680.449489][T20702] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 680.882355][ C0] syz_tun: tun_net_xmit 90 [ 681.365545][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 681.551545][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 681.763440][T20736] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3865'. [ 681.781247][T20736] 0ªî{X¹¦: entered promiscuous mode [ 681.781273][T20736] 0ªî{X¹¦: left allmulticast mode [ 681.806827][T20736] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3865'. [ 681.806959][T20736] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 681.837580][T20736] 1ªî{X¹¦: left promiscuous mode [ 681.837606][T20736] 1ªî{X¹¦: entered allmulticast mode [ 681.845431][T20736] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 681.861157][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 681.921002][ C0] syz_tun: tun_net_xmit 90 [ 682.339369][T20756] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 682.550267][T20769] 0ªî{X¹¦: entered promiscuous mode [ 682.550296][T20769] 0ªî{X¹¦: left allmulticast mode [ 682.655353][T20771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 682.661865][ T5742] syz_tun: tun_net_xmit 130 [ 682.670230][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.670341][ T8640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.872198][ T5742] syz_tun: tun_net_xmit 130 [ 682.961481][ C0] syz_tun: tun_net_xmit 90 [ 683.104147][T20789] 0ªî{X¹¦: left allmulticast mode [ 683.145134][T20789] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 683.180019][T20789] 1ªî{X¹¦: entered allmulticast mode [ 683.201782][T20789] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 683.330548][T20798] wg2 speed is unknown, defaulting to 1000 [ 683.360627][T20798] lo speed is unknown, defaulting to 1000 [ 683.381959][T20798] ±ÿ speed is unknown, defaulting to 1000 [ 683.562523][T20807] 1ªî{X¹¦: entered promiscuous mode [ 683.562549][T20807] 1ªî{X¹¦: left allmulticast mode [ 683.593097][T20807] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 683.619465][T20807] 0ªî{X¹¦: left promiscuous mode [ 683.619492][T20807] 0ªî{X¹¦: entered allmulticast mode [ 683.634499][T20807] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 683.982678][ T6615] syz_tun: tun_net_xmit 130 [ 684.000910][ C0] syz_tun: tun_net_xmit 90 [ 684.015586][T20817] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 684.171401][ T5727] syz_tun: tun_net_xmit 130 [ 684.235911][T20826] __nla_validate_parse: 14 callbacks suppressed [ 684.235933][T20826] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3898'. [ 684.242959][T20826] 1ªî{X¹¦: left allmulticast mode [ 684.259550][T20826] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3898'. [ 684.259664][T20826] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 684.277600][T20826] 0ªî{X¹¦: entered allmulticast mode [ 684.282142][T20826] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 684.286544][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'. [ 684.325876][T20829] x_tables: duplicate entry at hook 1 [ 684.513074][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 684.554985][T20838] netlink: 'syz.4.3904': attribute type 8 has an invalid length. [ 684.557914][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3904'. [ 684.559274][T20829] netlink: 'syz.3.3901': attribute type 1 has an invalid length. [ 684.746475][T20842] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3905'. [ 684.768267][T20842] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3905'. [ 684.768393][T20842] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 684.796740][T20842] 0ªî{X¹¦: left promiscuous mode [ 684.796766][T20842] 0ªî{X¹¦: entered allmulticast mode [ 684.806881][T20842] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 684.925698][T20847] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3908'. [ 684.986255][T20847] 0ªî{X¹¦: entered promiscuous mode [ 684.986291][T20847] 0ªî{X¹¦: left allmulticast mode [ 685.001851][T20850] siw: device registration error -23 [ 685.008807][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3909'. [ 685.041393][ C0] syz_tun: tun_net_xmit 90 [ 685.073115][T20847] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3908'. [ 685.109028][T20847] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 685.110390][T20847] 1ªî{X¹¦: left promiscuous mode [ 685.110403][T20847] 1ªî{X¹¦: entered allmulticast mode [ 685.115592][T20847] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 686.080943][ C0] syz_tun: tun_net_xmit 90 [ 686.443680][T20885] 0ªî{X¹¦: left allmulticast mode [ 686.450779][T20887] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 686.475160][T20887] 1ªî{X¹¦: entered allmulticast mode [ 686.478775][T20887] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 686.686584][T20891] 0ªî{X¹¦: entered promiscuous mode [ 686.686611][T20891] 0ªî{X¹¦: left allmulticast mode [ 686.768119][T20891] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 686.789597][T20891] 1ªî{X¹¦: left promiscuous mode [ 686.789625][T20891] 1ªî{X¹¦: entered allmulticast mode [ 686.798466][T20891] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 687.094503][T20910] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 687.094541][T20910] netlink: 'syz.3.3929': attribute type 2 has an invalid length. [ 687.121640][ C0] syz_tun: tun_net_xmit 90 [ 688.160947][ C0] syz_tun: tun_net_xmit 90 [ 688.963107][T20949] IPv4: Oversized IP packet from 127.202.26.0 [ 689.201431][ C0] syz_tun: tun_net_xmit 90 [ 689.582446][T20977] __nla_validate_parse: 10 callbacks suppressed [ 689.582467][T20977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3952'. [ 689.633960][T20977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 690.013656][T20987] bridge6: entered promiscuous mode [ 690.013684][T20987] bridge6: entered allmulticast mode [ 690.240948][ C0] syz_tun: tun_net_xmit 90 [ 690.484386][T21003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3964'. [ 690.486707][T21001] syzkaller1: entered promiscuous mode [ 690.486729][T21001] syzkaller1: entered allmulticast mode [ 690.512223][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 690.736443][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 690.882492][T21014] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3968'. [ 690.885351][T21014] 1ªî{X¹¦: entered promiscuous mode [ 690.885376][T21014] 1ªî{X¹¦: left allmulticast mode [ 690.912836][T21014] siw: device registration error -23 [ 690.938415][T21014] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3968'. [ 690.938527][T21014] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 690.959785][T21014] 0ªî{X¹¦: left promiscuous mode [ 690.959810][T21014] 0ªî{X¹¦: entered allmulticast mode [ 690.973789][T21014] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 691.283409][ C0] syz_tun: tun_net_xmit 90 [ 691.596947][T21041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3977'. [ 691.598487][T21041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3977'. [ 691.742180][T21044] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3978'. [ 691.748187][T21044] 1ªî{X¹¦: entered promiscuous mode [ 691.748212][T21044] 1ªî{X¹¦: left allmulticast mode [ 691.769940][T21044] siw: device registration error -23 [ 691.783817][T21044] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 691.791358][T21044] 0ªî{X¹¦: left promiscuous mode [ 691.791379][T21044] 0ªî{X¹¦: entered allmulticast mode [ 691.798160][T21044] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 692.208575][T21059] 0ªî{X¹¦: entered promiscuous mode [ 692.208603][T21059] 0ªî{X¹¦: left allmulticast mode [ 692.238101][T21059] siw: device registration error -23 [ 692.251529][T21059] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 692.277199][T21059] 1ªî{X¹¦: left promiscuous mode [ 692.277223][T21059] 1ªî{X¹¦: entered allmulticast mode [ 692.284894][T21059] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 692.320915][ C0] syz_tun: tun_net_xmit 90 [ 692.606109][T21073] netlink: Unknown conntrack attr (0) [ 692.848754][T21077] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 692.875495][T21077] 1ªî{X¹¦: left promiscuous mode [ 692.875523][T21077] 1ªî{X¹¦: entered allmulticast mode [ 692.877677][T21077] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 693.186999][T21102] siw: device registration error -23 [ 693.361690][ C0] syz_tun: tun_net_xmit 90 [ 693.632644][T21100] 1ªî{X¹¦: entered promiscuous mode [ 693.632670][T21100] 1ªî{X¹¦: left allmulticast mode [ 693.660699][T21104] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 693.727405][T21104] 0ªî{X¹¦: left promiscuous mode [ 693.730989][T21104] 0ªî{X¹¦: entered allmulticast mode [ 693.789051][T21104] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 694.187708][T21120] netlink: Unknown conntrack attr (0) [ 694.305791][T21130] x_tables: duplicate entry at hook 1 [ 694.400956][ C0] syz_tun: tun_net_xmit 90 [ 694.466134][T21128] bridge0: port 3(veth0) entered blocking state [ 694.466204][T21128] bridge0: port 3(veth0) entered disabled state [ 694.466320][T21128] veth0: entered allmulticast mode [ 694.497255][T21128] veth0: entered promiscuous mode [ 694.499198][T21128] bridge0: port 3(veth0) entered blocking state [ 694.499276][T21128] bridge0: port 3(veth0) entered forwarding state [ 694.671704][T21145] __nla_validate_parse: 9 callbacks suppressed [ 694.671725][T21145] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4007'. [ 694.676326][T21130] netlink: 'syz.2.4005': attribute type 1 has an invalid length. [ 694.705065][T21145] 0ªî{X¹¦: entered promiscuous mode [ 694.705090][T21145] 0ªî{X¹¦: left allmulticast mode [ 694.733386][T21145] siw: device registration error -23 [ 694.861551][T21152] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4009'. [ 694.871359][T21152] 1ªî{X¹¦: entered promiscuous mode [ 694.871383][T21152] 1ªî{X¹¦: left allmulticast mode [ 694.886490][T21152] siw: device registration error -23 [ 694.892652][T21152] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4009'. [ 694.892782][T21152] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 694.926240][T21152] 0ªî{X¹¦: left promiscuous mode [ 694.926266][T21152] 0ªî{X¹¦: entered allmulticast mode [ 694.934384][T21152] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 695.176181][T21161] netlink: Unknown conntrack attr (0) [ 695.446126][ C0] syz_tun: tun_net_xmit 90 [ 696.167589][T21176] ip_tables: iptables: counters copy to user failed while replacing table [ 696.294665][T21180] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4015'. [ 696.297613][T21180] siw: device registration error -23 [ 696.321513][T21180] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4015'. [ 696.321638][T21180] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 696.347544][T21180] 1ªî{X¹¦: left promiscuous mode [ 696.347569][T21180] 1ªî{X¹¦: entered allmulticast mode [ 696.363599][T21180] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 696.480941][ C0] syz_tun: tun_net_xmit 90 [ 696.566587][T21188] geneve0: entered promiscuous mode [ 696.605928][T21188] geneve0: left promiscuous mode [ 696.773640][T21202] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4020'. [ 696.831170][T21204] siw: device registration error -23 [ 696.904842][T21206] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4020'. [ 696.939671][T21202] 0ªî{X¹¦: entered promiscuous mode [ 696.939697][T21202] 0ªî{X¹¦: left allmulticast mode [ 696.950461][T21206] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 696.958599][T21206] 1ªî{X¹¦: left promiscuous mode [ 696.958621][T21206] 1ªî{X¹¦: entered allmulticast mode [ 696.967257][T21206] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 697.178390][T21210] x_tables: duplicate entry at hook 1 [ 697.343863][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 697.384736][T21210] netlink: 'syz.3.4022': attribute type 1 has an invalid length. [ 697.521415][ C0] syz_tun: tun_net_xmit 90 [ 697.723265][T21228] geneve0: entered promiscuous mode [ 697.727180][T21228] geneve0: left promiscuous mode [ 698.024794][T21247] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4033'. [ 698.025723][T21247] 1ªî{X¹¦: entered promiscuous mode [ 698.025738][T21247] 1ªî{X¹¦: left allmulticast mode [ 698.037838][T21247] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4033'. [ 698.037960][T21247] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 698.042744][T21247] 0ªî{X¹¦: left promiscuous mode [ 698.042764][T21247] 0ªî{X¹¦: entered allmulticast mode [ 698.045108][T21247] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 698.128483][T21248] 1ªî{X¹¦: entered promiscuous mode [ 698.128541][T21248] 1ªî{X¹¦: left allmulticast mode [ 698.176655][T21248] siw: device registration error -23 [ 698.193371][T21248] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 698.198772][T21248] 0ªî{X¹¦: left promiscuous mode [ 698.198798][T21248] 0ªî{X¹¦: entered allmulticast mode [ 698.220400][T21248] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 698.560905][ C0] syz_tun: tun_net_xmit 90 [ 698.900023][T21271] 0ªî{X¹¦: entered promiscuous mode [ 698.900050][T21271] 0ªî{X¹¦: left allmulticast mode [ 698.924360][T21271] siw: device registration error -23 [ 698.930349][T21271] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 698.949198][T21271] 1ªî{X¹¦: left promiscuous mode [ 698.949222][T21271] 1ªî{X¹¦: entered allmulticast mode [ 698.968933][T21271] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 699.108359][T21279] 0ªî{X¹¦: entered promiscuous mode [ 699.108385][T21279] 0ªî{X¹¦: left allmulticast mode [ 699.130326][T21279] siw: device registration error -23 [ 699.142294][T21279] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 699.156427][T21279] 1ªî{X¹¦: left promiscuous mode [ 699.156448][T21279] 1ªî{X¹¦: entered allmulticast mode [ 699.164148][T21279] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 699.386709][T21284] geneve0: entered promiscuous mode [ 699.400616][T21284] geneve0: left promiscuous mode [ 699.601593][ C0] syz_tun: tun_net_xmit 90 [ 699.997442][T21310] __nla_validate_parse: 6 callbacks suppressed [ 699.997464][T21310] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4056'. [ 700.261898][T21310] 0ªî{X¹¦: entered promiscuous mode [ 700.261927][T21310] 0ªî{X¹¦: left allmulticast mode [ 700.463464][T21319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4057'. [ 700.468786][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 700.640915][ C0] syz_tun: tun_net_xmit 90 [ 700.950723][T21341] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4063'. [ 700.972670][T21341] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4063'. [ 700.972797][T21341] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 700.975421][T21341] 1ªî{X¹¦: left promiscuous mode [ 700.975440][T21341] 1ªî{X¹¦: entered allmulticast mode [ 700.977786][T21341] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 701.454763][T21359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4070'. [ 701.456419][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4070'. [ 701.682226][ C0] syz_tun: tun_net_xmit 90 [ 702.722131][ C0] syz_tun: tun_net_xmit 90 [ 703.025964][T21401] x_tables: duplicate entry at hook 1 [ 703.209946][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4082'. [ 703.247238][T21403] netlink: 'syz.2.4082': attribute type 1 has an invalid length. [ 703.255140][T21405] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4083'. [ 703.270032][T21405] 1ªî{X¹¦: entered promiscuous mode [ 703.270057][T21405] 1ªî{X¹¦: left allmulticast mode [ 703.305844][T21405] siw: device registration error -23 [ 703.356249][T21405] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4083'. [ 703.356372][T21405] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 703.374636][T21405] 0ªî{X¹¦: left promiscuous mode [ 703.374659][T21405] 0ªî{X¹¦: entered allmulticast mode [ 703.378445][T21405] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 703.558574][T21413] netlink: 'syz.2.4086': attribute type 1 has an invalid length. [ 703.670184][T21417] gretap0: entered allmulticast mode [ 703.688823][T21417] bond0: (slave gretap0): making interface the new active one [ 703.690167][T21417] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 703.715347][T21411] netlink: 'syz.1.4085': attribute type 10 has an invalid length. [ 703.721459][T21411] netlink: 'syz.1.4085': attribute type 10 has an invalid length. [ 703.761511][ C0] syz_tun: tun_net_xmit 90 [ 704.340298][T21448] 1ªî{X¹¦: left allmulticast mode [ 704.352828][T21447] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 704.354743][T21447] 0ªî{X¹¦: entered allmulticast mode [ 704.355692][T21447] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 704.498596][T21454] x_tables: duplicate entry at hook 1 [ 704.578885][T21454] netlink: 'syz.3.4096': attribute type 1 has an invalid length. [ 704.715347][T21460] x_tables: duplicate entry at hook 1 [ 704.800951][ C0] syz_tun: tun_net_xmit 90 [ 704.953004][T21460] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 705.710599][T21483] ipvlan1: entered allmulticast mode [ 705.710626][T21483] macvlan1: entered allmulticast mode [ 705.710641][T21483] veth1_vlan: entered allmulticast mode [ 705.841439][ C0] syz_tun: tun_net_xmit 90 [ 705.989751][T21486] ipvlan1: entered allmulticast mode [ 706.034605][T21493] __nla_validate_parse: 4 callbacks suppressed [ 706.034628][T21493] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4105'. [ 706.098357][T21495] siw: device registration error -23 [ 706.179922][T21498] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4105'. [ 706.214214][T21493] 1ªî{X¹¦: entered promiscuous mode [ 706.214241][T21493] 1ªî{X¹¦: left allmulticast mode [ 706.224359][T21498] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 706.247155][T21498] 0ªî{X¹¦: left promiscuous mode [ 706.247181][T21498] 0ªî{X¹¦: entered allmulticast mode [ 706.257359][T21498] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 706.389069][T21500] geneve0: entered promiscuous mode [ 706.402660][T21500] geneve0: left promiscuous mode [ 706.644162][T21510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4110'. [ 706.648544][T21510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4110'. [ 706.881123][ C0] syz_tun: tun_net_xmit 90 [ 707.523141][T21540] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4120'. [ 707.584233][T21540] 0ªî{X¹¦: entered promiscuous mode [ 707.584261][T21540] 0ªî{X¹¦: left allmulticast mode [ 707.643701][T21542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4121'. [ 707.645411][T21544] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4120'. [ 707.648878][T21544] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 707.678602][T21544] 1ªî{X¹¦: left promiscuous mode [ 707.678625][T21544] 1ªî{X¹¦: entered allmulticast mode [ 707.699875][T21544] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 707.717531][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4121'. [ 707.840297][T21549] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4123'. [ 707.927523][ C0] syz_tun: tun_net_xmit 90 [ 708.929467][T21564] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 708.960906][ C0] syz_tun: tun_net_xmit 90 [ 709.009080][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'. [ 710.001410][ C0] syz_tun: tun_net_xmit 90 [ 710.021245][T21580] x_tables: duplicate entry at hook 1 [ 710.285123][T21595] 1ªî{X¹¦: entered promiscuous mode [ 710.285159][T21595] 1ªî{X¹¦: left allmulticast mode [ 710.344323][T21595] siw: device registration error -23 [ 710.357855][T21595] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 710.381768][T21595] 0ªî{X¹¦: left promiscuous mode [ 710.381796][T21595] 0ªî{X¹¦: entered allmulticast mode [ 710.387716][T21595] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 710.398336][T21584] netlink: 'syz.3.4135': attribute type 1 has an invalid length. [ 710.418626][T21597] 0ªî{X¹¦: left allmulticast mode [ 710.509690][T21597] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 710.521944][T21597] 1ªî{X¹¦: entered allmulticast mode [ 710.523184][T21597] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 710.543514][T21601] netlink: Unknown conntrack attr (0) [ 711.040951][ C0] syz_tun: tun_net_xmit 90 [ 711.146450][T21623] x_tables: duplicate entry at hook 1 [ 711.298932][T21626] __nla_validate_parse: 7 callbacks suppressed [ 711.298955][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4147'. [ 711.332451][T21623] netlink: 'syz.0.4147': attribute type 1 has an invalid length. [ 711.649842][T21641] block nbd1: server does not support multiple connections per device. [ 711.650192][T21641] block nbd1: shutting down sockets [ 711.755559][T21644] netlink: Unknown conntrack attr (0) [ 712.081523][ C0] syz_tun: tun_net_xmit 90 [ 712.102967][T21653] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 712.668363][T21663] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4158'. [ 712.820195][T21668] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4158'. [ 712.885555][T21669] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4159'. [ 712.944216][T21670] siw: device registration error -23 [ 713.003870][T21671] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4159'. [ 713.061578][T21663] 1ªî{X¹¦: left allmulticast mode [ 713.064363][T21668] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 713.077330][T21668] 0ªî{X¹¦: entered allmulticast mode [ 713.120936][ C0] syz_tun: tun_net_xmit 90 [ 713.219904][T21668] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 713.257737][T21669] 1ªî{X¹¦: entered promiscuous mode [ 713.257764][T21669] 1ªî{X¹¦: left allmulticast mode [ 713.300143][T21671] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 713.320285][T21671] 0ªî{X¹¦: left promiscuous mode [ 713.320312][T21671] 0ªî{X¹¦: entered allmulticast mode [ 713.339274][T21671] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 713.577718][T21683] x_tables: duplicate entry at hook 1 [ 713.865348][T21703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4165'. [ 714.018836][T21711] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 714.053249][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 714.161909][ C0] syz_tun: tun_net_xmit 90 [ 714.218145][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 715.020073][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 715.112864][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'. [ 715.200905][ C0] syz_tun: tun_net_xmit 90 [ 715.548830][T21747] siw: device registration error -23 [ 715.780651][T21741] 1ªî{X¹¦: entered promiscuous mode [ 715.780681][T21741] 1ªî{X¹¦: left allmulticast mode [ 715.815053][T21744] 0ªî{X¹¦: entered promiscuous mode [ 715.815079][T21744] 0ªî{X¹¦: left allmulticast mode [ 715.998537][T21748] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 716.022641][T21748] 0ªî{X¹¦: left promiscuous mode [ 716.022667][T21748] 0ªî{X¹¦: entered allmulticast mode [ 716.044384][T21748] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 716.065402][T21752] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 716.092993][T21752] 1ªî{X¹¦: left promiscuous mode [ 716.093018][T21752] 1ªî{X¹¦: entered allmulticast mode [ 716.102950][T21752] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 716.242143][ C0] syz_tun: tun_net_xmit 90 [ 716.439921][T21765] __nla_validate_parse: 4 callbacks suppressed [ 716.439943][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'. [ 716.524190][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4182'. [ 717.280905][ C0] syz_tun: tun_net_xmit 90 [ 717.973094][T21808] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4192'. [ 717.990445][T21808] 0ªî{X¹¦: left allmulticast mode [ 718.000786][T21807] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4192'. [ 718.001807][T21807] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 718.013470][T21807] 1ªî{X¹¦: entered allmulticast mode [ 718.015937][T21807] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 718.197790][T21813] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4193'. [ 718.199263][T21813] 1ªî{X¹¦: entered promiscuous mode [ 718.199288][T21813] 1ªî{X¹¦: left allmulticast mode [ 718.237121][T21813] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4193'. [ 718.237258][T21813] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 718.264886][T21813] 0ªî{X¹¦: left promiscuous mode [ 718.264911][T21813] 0ªî{X¹¦: entered allmulticast mode [ 718.269922][T21813] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 718.321473][ C0] syz_tun: tun_net_xmit 90 [ 718.631042][T21824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4198'. [ 718.688071][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4198'. [ 719.361957][ C0] syz_tun: tun_net_xmit 90 [ 719.431104][T21843] netlink: Unknown conntrack attr (0) [ 719.687771][T21848] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4204'. [ 719.689088][T21848] 0ªî{X¹¦: entered promiscuous mode [ 719.689111][T21848] 0ªî{X¹¦: left allmulticast mode [ 719.702213][T21848] siw: device registration error -23 [ 719.708703][T21848] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4204'. [ 719.708822][T21848] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 719.715444][T21848] 1ªî{X¹¦: left promiscuous mode [ 719.715465][T21848] 1ªî{X¹¦: entered allmulticast mode [ 719.726346][T21848] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 720.401415][ C0] syz_tun: tun_net_xmit 90 [ 720.854540][T21872] 0ªî{X¹¦: entered promiscuous mode [ 720.854586][T21872] 0ªî{X¹¦: left allmulticast mode [ 720.917015][T21879] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 721.009611][T21879] 1ªî{X¹¦: left promiscuous mode [ 721.011319][T21879] 1ªî{X¹¦: entered allmulticast mode [ 721.104319][T21879] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 721.440894][ C0] syz_tun: tun_net_xmit 90 [ 721.463390][T21898] __nla_validate_parse: 6 callbacks suppressed [ 721.463411][T21898] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4218'. [ 721.487029][T21898] 1ªî{X¹¦: entered promiscuous mode [ 721.487054][T21898] 1ªî{X¹¦: left allmulticast mode [ 721.505867][T21900] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4219'. [ 721.510585][T21900] 0ªî{X¹¦: entered promiscuous mode [ 721.510610][T21900] 0ªî{X¹¦: left allmulticast mode [ 721.533033][T21898] siw: device registration error -23 [ 721.539763][T21898] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4218'. [ 721.539915][T21898] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 721.547428][T21900] siw: device registration error -23 [ 721.552130][T21898] 0ªî{X¹¦: left promiscuous mode [ 721.552159][T21898] 0ªî{X¹¦: entered allmulticast mode [ 721.553079][T21903] netlink: Unknown conntrack attr (0) [ 721.560131][T21898] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 721.567028][T21900] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4219'. [ 721.567141][T21900] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 721.600170][T21900] 1ªî{X¹¦: left promiscuous mode [ 721.600191][T21900] 1ªî{X¹¦: entered allmulticast mode [ 721.609714][T21900] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 721.926217][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 722.053325][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4223'. [ 722.117633][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4223'. [ 722.395201][T21937] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4228'. [ 722.397356][T21937] 0ªî{X¹¦: entered promiscuous mode [ 722.397380][T21937] 0ªî{X¹¦: left allmulticast mode [ 722.419603][T21937] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4228'. [ 722.419755][T21937] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 722.429250][T21937] 1ªî{X¹¦: left promiscuous mode [ 722.429271][T21937] 1ªî{X¹¦: entered allmulticast mode [ 722.434777][T21937] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 722.481382][ C0] syz_tun: tun_net_xmit 90 [ 722.717548][T21947] x_tables: duplicate entry at hook 1 [ 722.920368][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'. [ 723.003889][T21947] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 723.416936][T21967] gretap0: entered promiscuous mode [ 723.441682][ T8640] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.441732][ T8640] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.441767][ T8640] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.441799][ T8640] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.520912][ C0] syz_tun: tun_net_xmit 90 [ 724.561537][ C0] syz_tun: tun_net_xmit 90 [ 725.600915][ C0] syz_tun: tun_net_xmit 90 [ 726.199995][T21991] 1ªî{X¹¦: entered promiscuous mode [ 726.200023][T21991] 1ªî{X¹¦: left allmulticast mode [ 726.302260][T21995] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 726.330106][T21995] 0ªî{X¹¦: left promiscuous mode [ 726.330133][T21995] 0ªî{X¹¦: entered allmulticast mode [ 726.337313][T21995] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 726.507758][T22003] __nla_validate_parse: 5 callbacks suppressed [ 726.507782][T22003] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4252'. [ 726.531619][T22003] 0ªî{X¹¦: entered promiscuous mode [ 726.531645][T22003] 0ªî{X¹¦: left allmulticast mode [ 726.547540][T22003] siw: device registration error -23 [ 726.558816][T22003] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4252'. [ 726.558950][T22003] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 726.586013][T22003] 1ªî{X¹¦: left promiscuous mode [ 726.586039][T22003] 1ªî{X¹¦: entered allmulticast mode [ 726.599313][T22003] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 726.641447][ C0] syz_tun: tun_net_xmit 90 [ 727.060086][T22015] geneve0: entered promiscuous mode [ 727.070204][T22015] geneve0: left promiscuous mode [ 727.261416][T22029] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4259'. [ 727.268990][T22029] 1ªî{X¹¦: entered promiscuous mode [ 727.269007][T22029] 1ªî{X¹¦: left allmulticast mode [ 727.303906][T22029] siw: device registration error -23 [ 727.319074][T22029] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4259'. [ 727.319202][T22029] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 727.337093][T22029] 0ªî{X¹¦: left promiscuous mode [ 727.337116][T22029] 0ªî{X¹¦: entered allmulticast mode [ 727.342737][T22029] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 727.572332][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4263'. [ 727.680892][ C0] syz_tun: tun_net_xmit 90 [ 727.793437][T22049] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4265'. [ 727.811814][T22049] 1ªî{X¹¦: entered promiscuous mode [ 727.811841][T22049] 1ªî{X¹¦: left allmulticast mode [ 727.826937][T22049] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4265'. [ 727.827057][T22049] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 727.872216][T22049] 0ªî{X¹¦: left promiscuous mode [ 727.872241][T22049] 0ªî{X¹¦: entered allmulticast mode [ 727.887926][T22049] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 728.051683][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4269'. [ 728.051849][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4269'. [ 728.146512][T22061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4270'. [ 728.721500][ C0] syz_tun: tun_net_xmit 90 [ 728.964108][T22079] geneve0: entered promiscuous mode [ 728.968644][T22079] geneve0: left promiscuous mode [ 729.476736][T22098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.489580][T22098] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 729.489647][ T5720] lo speed is unknown, defaulting to 1000 [ 729.760897][ C0] syz_tun: tun_net_xmit 90 [ 730.554443][T22133] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 730.801490][ C0] syz_tun: tun_net_xmit 90 [ 731.417744][T22159] netlink: Unknown conntrack attr (0) [ 731.796411][T22166] __nla_validate_parse: 3 callbacks suppressed [ 731.796435][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4301'. [ 731.840892][ C0] syz_tun: tun_net_xmit 90 [ 732.035574][T22174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4303'. [ 732.080450][T22176] block nbd1: server does not support multiple connections per device. [ 732.080783][T22176] block nbd1: shutting down sockets [ 732.433405][T22190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.433471][T22190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.547615][T22192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.547661][T22192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.572374][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 732.582464][T22190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.582547][T22190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.637012][T22192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4307'. [ 732.881641][ C0] syz_tun: tun_net_xmit 90 [ 733.056981][T22210] netlink: Unknown conntrack attr (0) [ 733.699054][T22238] 0ªî{X¹¦: entered promiscuous mode [ 733.699082][T22238] 0ªî{X¹¦: left allmulticast mode [ 733.714881][T22238] siw: device registration error -23 [ 733.725057][T22238] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 733.740403][T22238] 1ªî{X¹¦: left promiscuous mode [ 733.740430][T22238] 1ªî{X¹¦: entered allmulticast mode [ 733.749187][T22238] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 733.920892][ C0] syz_tun: tun_net_xmit 90 [ 734.303755][T22267] block nbd1: server does not support multiple connections per device. [ 734.304107][T22267] block nbd1: shutting down sockets [ 734.374461][T22269] 0ªî{X¹¦: entered promiscuous mode [ 734.964210][ C0] syz_tun: tun_net_xmit 90 [ 735.425229][T22296] netlink: Unknown conntrack attr (0) [ 735.472009][T22300] x_tables: duplicate entry at hook 1 [ 735.683348][T22305] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 735.740694][T22310] 0ªî{X¹¦: left allmulticast mode [ 735.759719][T22310] siw: device registration error -23 [ 735.802123][T22310] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 735.808297][T22310] 1ªî{X¹¦: entered allmulticast mode [ 735.828243][T22310] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 736.000892][ C0] syz_tun: tun_net_xmit 90 [ 736.905881][T22335] x_tables: duplicate entry at hook 1 [ 737.041398][ C0] syz_tun: tun_net_xmit 90 [ 737.081775][T22344] __nla_validate_parse: 11 callbacks suppressed [ 737.081798][T22344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'. [ 737.172451][T22344] netlink: 'syz.0.4338': attribute type 1 has an invalid length. [ 737.232413][T22350] block nbd1: server does not support multiple connections per device. [ 737.232633][T22350] block nbd1: shutting down sockets [ 737.640307][T22367] x_tables: duplicate entry at hook 1 [ 737.722361][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4345'. [ 737.795435][T22367] netlink: 'syz.0.4345': attribute type 1 has an invalid length. [ 738.080910][ C0] syz_tun: tun_net_xmit 90 [ 738.144859][T22389] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 738.189938][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 738.931612][T22407] block nbd1: server does not support multiple connections per device. [ 738.932462][T22407] block nbd1: shutting down sockets [ 739.066959][T22415] x_tables: duplicate entry at hook 1 [ 739.122281][ C0] syz_tun: tun_net_xmit 90 [ 739.158747][T22415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 739.311330][T22420] netlink: 'syz.1.4359': attribute type 1 has an invalid length. [ 739.857878][T22436] geneve0: entered promiscuous mode [ 739.866959][T22436] geneve0: left promiscuous mode [ 740.160895][ C0] syz_tun: tun_net_xmit 90 [ 740.443117][T22454] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4371'. [ 740.453937][T22454] 1ªî{X¹¦: left allmulticast mode [ 740.475610][T22454] siw: device registration error -23 [ 740.497806][T22454] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4371'. [ 740.497942][T22454] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 740.507302][T22454] 0ªî{X¹¦: entered allmulticast mode [ 740.515616][T22454] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 740.997883][T22475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4375'. [ 741.160589][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 741.201293][ C0] syz_tun: tun_net_xmit 90 [ 742.240912][ C0] syz_tun: tun_net_xmit 90 [ 742.546111][T22527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4386'. [ 742.547713][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'. [ 743.139283][T22548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4395'. [ 743.210097][T22552] syzkaller1: entered promiscuous mode [ 743.210125][T22552] syzkaller1: entered allmulticast mode [ 743.281664][ C0] syz_tun: tun_net_xmit 90 [ 743.396608][T22559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4398'. [ 743.596067][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4398'. [ 743.930329][T22573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4400'. [ 743.945665][T22578] block nbd1: server does not support multiple connections per device. [ 743.949024][T22578] block nbd1: shutting down sockets [ 743.973019][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 744.015932][T22576] geneve0: entered promiscuous mode [ 744.018879][T22576] geneve0: left promiscuous mode [ 744.140437][T22583] netlink: 'syz.1.4405': attribute type 10 has an invalid length. [ 744.164085][T22583] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.184010][T22583] bond0: (slave team0): Enslaving as an active interface with an up link [ 744.320887][ C0] syz_tun: tun_net_xmit 90 [ 744.515632][T22589] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4407'. [ 744.641044][T22594] netlink: Unknown conntrack attr (0) [ 744.876714][T22604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4410'. [ 744.883105][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4410'. [ 745.008068][T22610] 1ªî{X¹¦: entered promiscuous mode [ 745.008096][T22610] 1ªî{X¹¦: left allmulticast mode [ 745.033749][T22610] siw: device registration error -23 [ 745.055831][T22610] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 745.072818][T22610] 0ªî{X¹¦: left promiscuous mode [ 745.072842][T22610] 0ªî{X¹¦: entered allmulticast mode [ 745.079319][T22610] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 745.256612][T22618] block nbd1: server does not support multiple connections per device. [ 745.256982][T22618] block nbd1: shutting down sockets [ 745.361517][ C0] syz_tun: tun_net_xmit 90 [ 745.527124][T22622] geneve0: entered promiscuous mode [ 745.529498][T22622] geneve0: left promiscuous mode [ 746.400889][ C0] syz_tun: tun_net_xmit 90 [ 746.498233][T22668] 0ªî{X¹¦: entered promiscuous mode [ 746.498253][T22668] 0ªî{X¹¦: left allmulticast mode [ 746.521146][T22664] siw: device registration error -23 [ 746.709652][T22673] 1ªî{X¹¦: left allmulticast mode [ 746.720394][T22673] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 746.736085][T22673] 0ªî{X¹¦: entered allmulticast mode [ 746.739830][T22673] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 747.438277][T22697] siw: device registration error -23 [ 747.439298][T22697] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 747.443703][T22697] 1ªî{X¹¦: left promiscuous mode [ 747.443725][T22697] 1ªî{X¹¦: entered allmulticast mode [ 747.444907][ C0] syz_tun: tun_net_xmit 90 [ 747.445834][T22697] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 747.628194][T22703] __nla_validate_parse: 15 callbacks suppressed [ 747.628217][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4438'. [ 747.791445][T22705] geneve0: entered promiscuous mode [ 747.795504][T22705] geneve0: left promiscuous mode [ 747.814765][T22710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4442'. [ 747.836542][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4442'. [ 748.188634][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 748.378106][T22729] syzkaller1: entered promiscuous mode [ 748.378131][T22729] syzkaller1: entered allmulticast mode [ 748.480927][ C0] syz_tun: tun_net_xmit 90 [ 748.834076][T22738] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4449'. [ 748.853773][T22738] 1ªî{X¹¦: entered promiscuous mode [ 748.853800][T22738] 1ªî{X¹¦: left allmulticast mode [ 748.879750][T22738] siw: device registration error -23 [ 748.894422][T22738] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4449'. [ 748.894582][T22738] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 748.896590][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'. [ 748.909846][T22738] 0ªî{X¹¦: left promiscuous mode [ 748.909869][T22738] 0ªî{X¹¦: entered allmulticast mode [ 748.922455][T22738] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 749.223940][T22747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4453'. [ 749.243109][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4453'. [ 749.462557][T22748] syzkaller0: entered promiscuous mode [ 749.462586][T22748] syzkaller0: entered allmulticast mode [ 749.521615][ C0] syz_tun: tun_net_xmit 90 [ 750.560912][ C0] syz_tun: tun_net_xmit 90 [ 751.427158][T22790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 751.601530][ C0] syz_tun: tun_net_xmit 90 [ 752.648183][ C0] syz_tun: tun_net_xmit 90 [ 752.861999][T22764] geneve0: entered promiscuous mode [ 752.863670][T22764] geneve0: left promiscuous mode [ 753.149026][T22795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 753.149055][T22795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4466'. [ 753.149071][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4466'. [ 753.210022][T22800] block nbd1: server does not support multiple connections per device. [ 753.210388][T22800] block nbd1: shutting down sockets [ 753.253665][T22805] block nbd2: server does not support multiple connections per device. [ 753.254553][T22805] block nbd2: shutting down sockets [ 753.635122][T22817] syzkaller1: entered promiscuous mode [ 753.635146][T22817] syzkaller1: entered allmulticast mode [ 753.681700][ C0] syz_tun: tun_net_xmit 90 [ 753.707533][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4474'. [ 753.739816][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4474'. [ 753.889257][T22827] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4476'. [ 754.175148][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4479'. [ 754.358738][T22844] block nbd1: server does not support multiple connections per device. [ 754.359204][T22844] block nbd1: shutting down sockets [ 754.474228][T22848] block nbd1: server does not support multiple connections per device. [ 754.474593][T22848] block nbd1: shutting down sockets [ 754.720905][ C0] syz_tun: tun_net_xmit 90 [ 754.749242][T22855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4486'. [ 754.785732][T22855] syzkaller1: entered promiscuous mode [ 754.785759][T22855] syzkaller1: entered allmulticast mode [ 754.796243][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4488'. [ 754.818863][T22859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4487'. [ 755.048735][T22862] 0ªî{X¹¦: left allmulticast mode [ 755.066218][T22862] siw: device registration error -23 [ 755.077729][T22862] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 755.099948][T22862] 1ªî{X¹¦: entered allmulticast mode [ 755.111828][T22862] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 755.603181][T22888] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 755.699187][T22892] block nbd1: server does not support multiple connections per device. [ 755.699573][T22892] block nbd1: shutting down sockets [ 755.761659][ C0] syz_tun: tun_net_xmit 90 [ 755.810239][T22897] netlink: 'syz.4.4499': attribute type 1 has an invalid length. [ 755.862981][T22897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.969415][T22904] block nbd1: server does not support multiple connections per device. [ 755.969906][T22904] block nbd1: shutting down sockets [ 756.800879][ C0] syz_tun: tun_net_xmit 90 [ 756.924896][T22939] syzkaller1: entered promiscuous mode [ 756.924923][T22939] syzkaller1: entered allmulticast mode [ 757.339744][T22954] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 757.841450][ C0] syz_tun: tun_net_xmit 90 [ 758.485898][T22985] __nla_validate_parse: 8 callbacks suppressed [ 758.485919][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4524'. [ 758.654278][T22988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4524'. [ 758.880930][ C0] syz_tun: tun_net_xmit 90 [ 759.579632][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4532'. [ 759.921531][ C0] syz_tun: tun_net_xmit 90 [ 760.628640][T23026] geneve0: entered promiscuous mode [ 760.645328][T23026] geneve0: left promiscuous mode [ 760.873808][T23052] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 760.906648][T23052] bond4: (slave lo): Enslaving as an active interface with an up link [ 760.935833][T23052] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 760.960873][ C0] syz_tun: tun_net_xmit 90 [ 761.013830][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 761.405092][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 761.405131][T23077] veth0: entered promiscuous mode [ 761.405147][T23077] veth0: entered allmulticast mode [ 761.410345][T23077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4548'. [ 761.867241][T23084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4549'. [ 762.003413][ C0] syz_tun: tun_net_xmit 90 [ 762.395630][T23094] syz_tun: entered allmulticast mode [ 762.398500][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4552'. [ 762.398541][T23095] netlink: 'syz.0.4552': attribute type 7 has an invalid length. [ 762.398555][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'. [ 763.040884][ C0] syz_tun: tun_net_xmit 90 [ 763.056370][T23090] syz_tun: left allmulticast mode [ 763.212559][T23113] netlink: Unknown conntrack attr (0) [ 764.081711][ C0] syz_tun: tun_net_xmit 90 [ 765.121295][ C0] syz_tun: tun_net_xmit 90 [ 765.242588][T23177] netlink: 'syz.1.4577': attribute type 11 has an invalid length. [ 765.467398][T23182] netlink: Unknown conntrack attr (0) [ 765.776307][T23197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 765.885284][T23203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 766.052503][T23203] 8021q: adding VLAN 0 to HW filter on device bond7 [ 766.054671][T23203] bond6: (slave bond7): Enslaving as an active interface with an up link [ 766.161555][ C0] syz_tun: tun_net_xmit 90 [ 766.345470][T23220] nbd1: detected capacity change from 0 to 63 [ 766.347443][T23220] block nbd1: NBD_DISCONNECT [ 766.392224][T23220] block nbd1: Disconnected due to user request. [ 766.395757][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.395869][ T2000] Buffer I/O error on dev nbd1, logical block 0, async page read [ 766.395879][T23220] block nbd1: shutting down sockets [ 766.396269][ T2000] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 766.396295][ T2000] Buffer I/O error on dev nbd1, logical block 1, async page read [ 766.396309][ T2000] Buffer I/O error on dev nbd1, logical block 2, async page read [ 766.396323][ T2000] Buffer I/O error on dev nbd1, logical block 3, async page read [ 766.407576][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 766.407618][ T2000] Buffer I/O error on dev nbd1, logical block 0, async page read [ 766.407635][ T2000] Buffer I/O error on dev nbd1, logical block 1, async page read [ 766.407649][ T2000] Buffer I/O error on dev nbd1, logical block 2, async page read [ 766.407662][ T2000] Buffer I/O error on dev nbd1, logical block 3, async page read [ 766.407856][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 766.407879][ T2000] Buffer I/O error on dev nbd1, logical block 0, async page read [ 766.407912][ T2000] Buffer I/O error on dev nbd1, logical block 1, async page read [ 766.408055][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 766.408210][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 766.409141][ T2000] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.409245][ T2000] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.409347][ T2000] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.409471][ T2000] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.410422][ T5616] ldm_validate_partition_table(): Disk read failed. [ 766.412502][ T5616] Dev nbd1: unable to read RDB block 0 [ 766.414298][ T5616] nbd1: unable to read partition table [ 766.435628][ T5616] ldm_validate_partition_table(): Disk read failed. [ 766.436653][ T5616] Dev nbd1: unable to read RDB block 0 [ 766.438750][ T5616] nbd1: unable to read partition table [ 766.835003][T23227] netlink: Unknown conntrack attr (0) [ 767.201766][ C0] syz_tun: tun_net_xmit 90 [ 767.437694][T23259] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4599'. [ 767.465574][T23259] 0ªî{X¹¦: entered promiscuous mode [ 767.465603][T23259] 0ªî{X¹¦: left allmulticast mode [ 767.492810][T23252] siw: device registration error -23 [ 767.499826][T23252] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4599'. [ 767.501929][T23252] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 767.513181][T23252] 1ªî{X¹¦: left promiscuous mode [ 767.513203][T23252] 1ªî{X¹¦: entered allmulticast mode [ 767.519997][T23252] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 767.705436][T23263] tipc: Enabling of bearer rejected, already enabled [ 767.743781][T23265] syzkaller0: entered promiscuous mode [ 767.743807][T23265] syzkaller0: entered allmulticast mode [ 767.982364][T23271] syzkaller0: entered promiscuous mode [ 767.982391][T23271] syzkaller0: entered allmulticast mode [ 768.241576][ C0] syz_tun: tun_net_xmit 90 [ 768.518051][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4609'. [ 768.753323][T23300] xt_nfacct: accounting object `' does not exist [ 768.818228][T23300] netlink: 'syz.0.4613': attribute type 2 has an invalid length. [ 768.906092][T23303] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 768.906204][T23303] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 769.051733][T23307] syzkaller0: entered promiscuous mode [ 769.051758][T23307] syzkaller0: entered allmulticast mode [ 769.246045][T23311] syzkaller1: entered promiscuous mode [ 769.246067][T23311] syzkaller1: entered allmulticast mode [ 769.283102][ C0] syz_tun: tun_net_xmit 90 [ 770.321499][ C0] syz_tun: tun_net_xmit 90 [ 770.924969][T23362] syzkaller0: entered promiscuous mode [ 770.924996][T23362] syzkaller0: entered allmulticast mode [ 771.280926][T23373] x_tables: duplicate entry at hook 1 [ 771.360872][ C0] syz_tun: tun_net_xmit 90 [ 771.423413][T23373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4635'. [ 771.461677][T23373] netlink: 'syz.3.4635': attribute type 1 has an invalid length. [ 771.613257][T23386] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4638'. [ 771.681907][T23387] siw: device registration error -23 [ 771.756887][T23386] 1ªî{X¹¦: left allmulticast mode [ 772.071048][ T5946] bond0: (slave ip6gretap0): interface is now down [ 772.072888][T23402] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 772.098725][ T34] bond0: (slave ip6gretap0): interface is now down [ 772.120542][ T34] bond0: (slave ip6gretap0): interface is now down [ 772.132149][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.151179][ T34] bond0: (slave ip6gretap0): interface is now down [ 772.171062][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.191451][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.211056][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.231028][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.251016][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.271410][ T5946] bond0: (slave ip6gretap0): interface is now down [ 772.293973][ T5956] bond0: (slave ip6gretap0): interface is now down [ 772.336973][T23402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.350512][T23402] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 772.371174][T23402] bond0 (unregistering): Released all slaves [ 772.401769][ C0] syz_tun: tun_net_xmit 90 [ 772.850793][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4652'. [ 772.896788][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4652'. [ 772.961927][T23435] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4653'. [ 772.966082][T23435] 1ªî{X¹¦: entered promiscuous mode [ 772.966107][T23435] 1ªî{X¹¦: left allmulticast mode [ 773.005282][T23435] siw: device registration error -23 [ 773.036214][T23435] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4653'. [ 773.036337][T23435] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 773.061989][T23435] 0ªî{X¹¦: left promiscuous mode [ 773.062015][T23435] 0ªî{X¹¦: entered allmulticast mode [ 773.064137][T23435] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 773.157888][T23440] syzkaller0: entered promiscuous mode [ 773.157912][T23440] syzkaller0: entered allmulticast mode [ 773.315125][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 773.441260][ C0] syz_tun: tun_net_xmit 90 [ 773.552743][T23455] geneve0: entered promiscuous mode [ 773.583639][T23455] geneve0: left promiscuous mode [ 774.307033][T23482] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 774.307062][T23482] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 774.481416][ C0] syz_tun: tun_net_xmit 90 [ 774.642409][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4671'. [ 774.754942][T23497] geneve0: entered promiscuous mode [ 774.768544][T23497] geneve0: left promiscuous mode [ 774.856155][T23507] netlink: Unknown conntrack attr (0) [ 775.320025][T23523] bridge_slave_0: left promiscuous mode [ 775.320300][T23523] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.358511][T23523] vlan0: left allmulticast mode [ 775.358534][T23523] geneve0: left allmulticast mode [ 775.359518][T23523] vlan0: left promiscuous mode [ 775.359536][T23523] geneve0: left promiscuous mode [ 775.360921][T23523] bridge0: port 3(vlan0) entered disabled state [ 775.389346][T23523] bridge_slave_1: left allmulticast mode [ 775.389366][T23523] bridge_slave_1: left promiscuous mode [ 775.389521][T23523] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.422744][T23530] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4680'. [ 775.521515][ C0] syz_tun: tun_net_xmit 90 [ 775.584578][T23536] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4680'. [ 775.627730][T23537] netlink: 'syz.3.4681': attribute type 4 has an invalid length. [ 775.629111][T23536] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 775.647661][T23536] 0ªî{X¹¦: entered allmulticast mode [ 775.650788][T23536] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 775.666948][T23535] netlink: 'syz.3.4681': attribute type 4 has an invalid length. [ 776.544694][T23574] netlink: 'syz.0.4694': attribute type 83 has an invalid length. [ 776.561950][ C0] syz_tun: tun_net_xmit 90 [ 776.675878][T23580] __nla_validate_parse: 3 callbacks suppressed [ 776.675901][T23580] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4695'. [ 776.696775][T23580] 0ªî{X¹¦: left allmulticast mode [ 776.712142][T23580] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4695'. [ 776.712275][T23580] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 776.717944][T23580] 1ªî{X¹¦: entered allmulticast mode [ 776.720440][T23580] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 777.134797][T23591] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4698'. [ 777.139610][T23591] 1ªî{X¹¦: left allmulticast mode [ 777.197024][T23591] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4698'. [ 777.197158][T23591] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 777.233104][T23591] 0ªî{X¹¦: entered allmulticast mode [ 777.244383][T23591] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 777.600877][ C0] syz_tun: tun_net_xmit 90 [ 778.381337][T23641] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 778.381366][T23641] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 778.578428][T23648] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4714'. [ 778.590727][T23648] 0ªî{X¹¦: entered promiscuous mode [ 778.590755][T23648] 0ªî{X¹¦: left allmulticast mode [ 778.629622][T23648] siw: device registration error -23 [ 778.641338][ C0] syz_tun: tun_net_xmit 90 [ 778.682455][T23648] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4714'. [ 778.682582][T23648] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 778.708648][T23648] 1ªî{X¹¦: left promiscuous mode [ 778.708665][T23648] 1ªî{X¹¦: entered allmulticast mode [ 778.710110][T23648] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 778.971750][T23663] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 778.971778][T23663] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 779.680879][ C0] syz_tun: tun_net_xmit 90 [ 779.867295][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4722'. [ 779.867341][T23688] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4722'. [ 780.655003][T23714] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4731'. [ 780.656471][T23714] 0ªî{X¹¦: left allmulticast mode [ 780.664250][T23714] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4731'. [ 780.664369][T23714] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 780.679753][T23714] 1ªî{X¹¦: entered allmulticast mode [ 780.695493][T23714] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 780.721642][ C0] syz_tun: tun_net_xmit 90 [ 781.760912][ C0] syz_tun: tun_net_xmit 90 [ 781.938617][T23753] openvswitch: netlink: IPv6 tunnel dst address is zero [ 782.042475][T23758] __nla_validate_parse: 1 callbacks suppressed [ 782.042496][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 782.087299][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4743'. [ 782.566854][T23777] netlink: Unknown conntrack attr (0) [ 782.801390][ C0] syz_tun: tun_net_xmit 90 [ 782.825196][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 782.825224][T23785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 783.456059][T23808] syzkaller0: entered promiscuous mode [ 783.456084][T23808] syzkaller0: entered allmulticast mode [ 783.820942][T23815] netlink: Unknown conntrack attr (0) [ 783.840872][ C0] syz_tun: tun_net_xmit 90 [ 784.314892][T23830] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4762'. [ 784.314918][T23830] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4762'. [ 784.463683][T23837] syzkaller0: entered promiscuous mode [ 784.463708][T23837] syzkaller0: entered allmulticast mode [ 784.881402][ C0] syz_tun: tun_net_xmit 90 [ 785.920871][ C0] syz_tun: tun_net_xmit 90 [ 786.961415][ C0] syz_tun: tun_net_xmit 90 [ 788.000868][ C0] syz_tun: tun_net_xmit 90 [ 788.820336][T23912] netlink: 'syz.3.4782': attribute type 12 has an invalid length. [ 788.865637][T23916] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 788.865665][T23916] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 789.041554][ C0] syz_tun: tun_net_xmit 90 [ 790.081244][ C0] syz_tun: tun_net_xmit 90 [ 791.014088][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4792'. [ 791.098298][T23981] syzkaller0: entered promiscuous mode [ 791.098323][T23981] syzkaller0: entered allmulticast mode [ 791.121449][ C0] syz_tun: tun_net_xmit 90 [ 791.281941][T23985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.169623][ C0] syz_tun: tun_net_xmit 90 [ 792.791142][T24031] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 792.791170][T24031] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 793.071901][T24040] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 793.136490][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4808'. [ 793.210390][ C0] syz_tun: tun_net_xmit 90 [ 794.240876][ C0] syz_tun: tun_net_xmit 90 [ 795.281487][ C0] syz_tun: tun_net_xmit 90 [ 795.848693][T24043] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 795.900456][T24050] veth13: entered allmulticast mode [ 795.960661][T24073] x_tables: duplicate entry at hook 1 [ 796.018805][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4812'. [ 796.051097][T24073] netlink: 'syz.2.4812': attribute type 1 has an invalid length. [ 796.131449][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4814'. [ 796.200619][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4814'. [ 796.311210][T24089] netlink: 'syz.0.4815': attribute type 1 has an invalid length. [ 796.320908][ C0] syz_tun: tun_net_xmit 90 [ 796.388277][T24089] 8021q: adding VLAN 0 to HW filter on device bond5 [ 796.391551][T24088] syzkaller0: entered promiscuous mode [ 796.391578][T24088] syzkaller0: entered allmulticast mode [ 796.441704][T24085] bond5: (slave veth0_to_bond): making interface the new active one [ 796.451799][T24085] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 796.609228][T24085] bond5: entered promiscuous mode [ 796.609255][T24085] veth0_to_bond: entered promiscuous mode [ 796.609470][T24085] bond5: entered allmulticast mode [ 796.609484][T24085] veth0_to_bond: entered allmulticast mode [ 796.677037][T24089] macvlan4: entered promiscuous mode [ 796.677064][T24089] macvlan4: entered allmulticast mode [ 796.704165][T24089] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 796.710624][T24089] bond5: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 796.925887][T24096] syzkaller0: entered promiscuous mode [ 796.925913][T24096] syzkaller0: entered allmulticast mode [ 797.000697][T24098] netlink: 'syz.0.4819': attribute type 1 has an invalid length. [ 797.107484][T24098] bond6: entered promiscuous mode [ 797.108061][T24098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 797.209304][T24100] macvtap0: entered allmulticast mode [ 797.263356][T24098] bond6: (slave bridge9): making interface the new active one [ 797.263384][T24098] bridge9: entered promiscuous mode [ 797.265298][T24098] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 797.361444][ C0] syz_tun: tun_net_xmit 90 [ 797.365735][T24106] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4822'. [ 797.372078][T24106] 0ªî{X¹¦: entered promiscuous mode [ 797.372105][T24106] 0ªî{X¹¦: left allmulticast mode [ 797.388742][T24106] siw: device registration error -23 [ 797.402295][T24106] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4822'. [ 797.402450][T24106] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 797.409766][T24106] 1ªî{X¹¦: left promiscuous mode [ 797.409788][T24106] 1ªî{X¹¦: entered allmulticast mode [ 797.422379][T24106] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 797.565957][T24102] xt_CT: No such helper "netbios-ns" [ 797.766602][T24125] x_tables: duplicate entry at hook 1 [ 797.962525][T24133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4826'. [ 798.087602][T24135] netlink: 'syz.3.4826': attribute type 1 has an invalid length. [ 798.401499][ C0] syz_tun: tun_net_xmit 90 [ 798.656994][T24141] syzkaller0: entered promiscuous mode [ 798.657020][T24141] syzkaller0: entered allmulticast mode [ 799.441444][ C0] syz_tun: tun_net_xmit 90 [ 799.655177][T24172] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4835'. [ 799.692223][T24166] [ 799.694617][T24166] ====================================================== [ 799.701730][T24166] WARNING: possible circular locking dependency detected [ 799.708871][T24166] syzkaller #0 Not tainted [ 799.713308][T24166] ------------------------------------------------------ [ 799.720396][T24166] syz.0.4833/24166 is trying to acquire lock: [ 799.726481][T24166] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 799.736484][T24166] [ 799.736484][T24166] but task is already holding lock: [ 799.743883][T24166] ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 799.752741][T24166] [ 799.752741][T24166] which lock already depends on the new lock. [ 799.752741][T24166] [ 799.763168][T24166] [ 799.763168][T24166] the existing dependency chain (in reverse order) is: [ 799.772213][T24166] [ 799.772213][T24166] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 799.779582][T24166] __mutex_lock+0x19d/0x1550 [ 799.784780][T24166] get_device_parent+0x16f/0x3a0 [ 799.790240][T24166] device_add+0x2d4/0xb80 [ 799.795088][T24166] device_create+0x269/0x300 [ 799.800200][T24166] msr_device_create+0x33/0x50 [ 799.805521][T24166] cpuhp_invoke_callback+0x434/0x810 [ 799.811354][T24166] cpuhp_thread_fun+0x362/0x780 [ 799.816735][T24166] smpboot_thread_fn+0x565/0xa70 [ 799.822214][T24166] kthread+0x38b/0x480 [ 799.826817][T24166] ret_from_fork+0x514/0xb70 [ 799.831924][T24166] ret_from_fork_asm+0x1a/0x30 [ 799.837222][T24166] [ 799.837222][T24166] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 799.844782][T24166] cpuhp_thread_fun+0x127/0x780 [ 799.850160][T24166] smpboot_thread_fn+0x565/0xa70 [ 799.855626][T24166] kthread+0x38b/0x480 [ 799.860216][T24166] ret_from_fork+0x514/0xb70 [ 799.865325][T24166] ret_from_fork_asm+0x1a/0x30 [ 799.870628][T24166] [ 799.870628][T24166] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 799.878360][T24166] cpus_read_lock+0x42/0x160 [ 799.883483][T24166] static_key_slow_inc+0x12/0x30 [ 799.888964][T24166] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 799.895275][T24166] nbd_genl_foreach_sock+0x265/0x450 [ 799.901083][T24166] nbd_genl_reconfigure+0xbbb/0x1040 [ 799.906888][T24166] genl_family_rcv_msg_doit+0x233/0x340 [ 799.913017][T24166] genl_rcv_msg+0x614/0x7a0 [ 799.918053][T24166] netlink_rcv_skb+0x226/0x4a0 [ 799.923379][T24166] genl_rcv+0x28/0x40 [ 799.927895][T24166] netlink_unicast+0x7bd/0x940 [ 799.933205][T24166] netlink_sendmsg+0x813/0xb40 [ 799.938492][T24166] sock_sendmsg_nosec+0x13a/0x180 [ 799.944070][T24166] ____sys_sendmsg+0x54e/0x850 [ 799.949362][T24166] ___sys_sendmsg+0x2a5/0x360 [ 799.954569][T24166] __x64_sys_sendmsg+0x1b1/0x290 [ 799.960033][T24166] do_syscall_64+0x166/0x520 [ 799.965149][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.971565][T24166] [ 799.971565][T24166] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 799.979218][T24166] __mutex_lock+0x19d/0x1550 [ 799.984334][T24166] nbd_queue_rq+0x373/0xff0 [ 799.989363][T24166] blk_mq_dispatch_rq_list+0x499/0x1990 [ 799.995495][T24166] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.002390][T24166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.008899][T24166] blk_mq_run_work_fn+0x16c/0x300 [ 800.014448][T24166] process_scheduled_works+0xc3d/0x1630 [ 800.020522][T24166] worker_thread+0xa47/0xfb0 [ 800.025639][T24166] kthread+0x38b/0x480 [ 800.030231][T24166] ret_from_fork+0x514/0xb70 [ 800.035339][T24166] ret_from_fork_asm+0x1a/0x30 [ 800.040637][T24166] [ 800.040637][T24166] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 800.047848][T24166] __mutex_lock+0x19d/0x1550 [ 800.052975][T24166] nbd_queue_rq+0xc1/0xff0 [ 800.057914][T24166] blk_mq_dispatch_rq_list+0x499/0x1990 [ 800.063981][T24166] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.070836][T24166] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.077341][T24166] blk_mq_run_work_fn+0x16c/0x300 [ 800.082899][T24166] process_scheduled_works+0xc3d/0x1630 [ 800.088993][T24166] worker_thread+0xa47/0xfb0 [ 800.094110][T24166] kthread+0x38b/0x480 [ 800.098699][T24166] ret_from_fork+0x514/0xb70 [ 800.103817][T24166] ret_from_fork_asm+0x1a/0x30 [ 800.109112][T24166] [ 800.109112][T24166] -> #5 (set->srcu){.+.+}-{0:0}: [ 800.116236][T24166] __synchronize_srcu+0xc9/0x2f0 [ 800.121697][T24166] elevator_switch+0x1e8/0x7b0 [ 800.127030][T24166] elevator_change+0x2fa/0x480 [ 800.132320][T24166] elevator_set_default+0x375/0x440 [ 800.138047][T24166] blk_register_queue+0x3f3/0x4e0 [ 800.143639][T24166] __add_disk+0x6b8/0xdb0 [ 800.148498][T24166] add_disk_fwnode+0x100/0x3a0 [ 800.153788][T24166] nbd_dev_add+0x733/0xb60 [ 800.158726][T24166] nbd_init+0x168/0x1f0 [ 800.163499][T24166] do_one_initcall+0x250/0x870 [ 800.168799][T24166] do_initcall_level+0x10a/0x1a0 [ 800.174386][T24166] do_initcalls+0x59/0xa0 [ 800.179253][T24166] kernel_init_freeable+0x29d/0x3e0 [ 800.184988][T24166] kernel_init+0x22/0x1d0 [ 800.189846][T24166] ret_from_fork+0x514/0xb70 [ 800.194959][T24166] ret_from_fork_asm+0x1a/0x30 [ 800.200250][T24166] [ 800.200250][T24166] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 800.208073][T24166] __mutex_lock+0x19d/0x1550 [ 800.213190][T24166] elevator_change+0x1af/0x480 [ 800.218477][T24166] elevator_set_none+0xb5/0x140 [ 800.223850][T24166] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 800.230189][T24166] nbd_start_device+0x189/0xb30 [ 800.235562][T24166] nbd_genl_connect+0x167d/0x1cd0 [ 800.241106][T24166] genl_family_rcv_msg_doit+0x233/0x340 [ 800.247176][T24166] genl_rcv_msg+0x614/0x7a0 [ 800.252202][T24166] netlink_rcv_skb+0x226/0x4a0 [ 800.257504][T24166] genl_rcv+0x28/0x40 [ 800.262012][T24166] netlink_unicast+0x7bd/0x940 [ 800.267303][T24166] netlink_sendmsg+0x813/0xb40 [ 800.272584][T24166] sock_sendmsg_nosec+0x13a/0x180 [ 800.278130][T24166] ____sys_sendmsg+0x54e/0x850 [ 800.283418][T24166] ___sys_sendmsg+0x2a5/0x360 [ 800.288620][T24166] __x64_sys_sendmsg+0x1b1/0x290 [ 800.294084][T24166] do_syscall_64+0x166/0x520 [ 800.299203][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.305620][T24166] [ 800.305620][T24166] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 800.314285][T24166] blk_alloc_queue+0x544/0x690 [ 800.319573][T24166] __blk_mq_alloc_disk+0x194/0x390 [ 800.325210][T24166] nbd_dev_add+0x494/0xb60 [ 800.330155][T24166] nbd_init+0x168/0x1f0 [ 800.334837][T24166] do_one_initcall+0x250/0x870 [ 800.340129][T24166] do_initcall_level+0x10a/0x1a0 [ 800.345593][T24166] do_initcalls+0x59/0xa0 [ 800.350445][T24166] kernel_init_freeable+0x29d/0x3e0 [ 800.356166][T24166] kernel_init+0x22/0x1d0 [ 800.361022][T24166] ret_from_fork+0x514/0xb70 [ 800.366132][T24166] ret_from_fork_asm+0x1a/0x30 [ 800.371424][T24166] [ 800.371424][T24166] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 800.378653][T24166] fs_reclaim_acquire+0x71/0x100 [ 800.384115][T24166] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 800.390363][T24166] alloc_inode+0xb8/0x1b0 [ 800.395244][T24166] iget_locked+0x131/0x6a0 [ 800.400186][T24166] kernfs_get_inode+0x4f/0x770 [ 800.405479][T24166] kernfs_get_tree+0x5cd/0x980 [ 800.410769][T24166] vfs_get_tree+0x92/0x2a0 [ 800.415729][T24166] do_new_mount+0x319/0xdc0 [ 800.420756][T24166] __se_sys_mount+0x31d/0x420 [ 800.425960][T24166] do_syscall_64+0x166/0x520 [ 800.431075][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.437488][T24166] [ 800.437488][T24166] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 800.445494][T24166] down_write+0x96/0x200 [ 800.450287][T24166] kernfs_remove_by_name_ns+0x4e/0x140 [ 800.456274][T24166] device_links_driver_bound+0x4ab/0x1440 [ 800.462531][T24166] driver_bound+0xd8/0x2e0 [ 800.467473][T24166] really_probe+0x774/0xae0 [ 800.472562][T24166] __driver_probe_device+0x1e8/0x360 [ 800.478370][T24166] driver_probe_device+0x4f/0x240 [ 800.483920][T24166] __device_attach_driver+0x270/0x410 [ 800.489820][T24166] bus_for_each_drv+0x258/0x2f0 [ 800.495201][T24166] __device_attach+0x2c4/0x450 [ 800.500486][T24166] device_initial_probe+0xa1/0xd0 [ 800.506030][T24166] bus_probe_device+0x12a/0x220 [ 800.511409][T24166] device_add+0x7d7/0xb80 [ 800.516261][T24166] faux_device_create_with_groups+0x1a5/0x2b0 [ 800.522893][T24166] regulator_dummy_init+0x19/0x40 [ 800.528485][T24166] regulator_init+0xca/0x110 [ 800.533596][T24166] do_one_initcall+0x250/0x870 [ 800.538890][T24166] do_initcall_level+0x10a/0x1a0 [ 800.544354][T24166] do_initcalls+0x59/0xa0 [ 800.549211][T24166] kernel_init_freeable+0x29d/0x3e0 [ 800.554932][T24166] kernel_init+0x22/0x1d0 [ 800.559791][T24166] ret_from_fork+0x514/0xb70 [ 800.564901][T24166] ret_from_fork_asm+0x1a/0x30 [ 800.570192][T24166] [ 800.570192][T24166] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 800.578796][T24166] __lock_acquire+0x164c/0x2de0 [ 800.584185][T24166] lock_acquire+0x115/0x350 [ 800.589207][T24166] down_read+0x4a/0x330 [ 800.593891][T24166] kernfs_remove+0x35/0x80 [ 800.598829][T24166] __kobject_del+0xe0/0x310 [ 800.603922][T24166] kobject_del+0x45/0x60 [ 800.608689][T24166] cleanup_glue_dir+0x1a3/0x220 [ 800.614060][T24166] device_del+0x77d/0x8f0 [ 800.618909][T24166] unregister_netdevice_many_notify+0x1be1/0x2140 [ 800.625914][T24166] unregister_netdevice_queue+0x2f5/0x340 [ 800.632166][T24166] ieee802154_del_iface+0x2e2/0x610 [ 800.637955][T24166] genl_family_rcv_msg_doit+0x233/0x340 [ 800.644026][T24166] genl_rcv_msg+0x614/0x7a0 [ 800.649051][T24166] netlink_rcv_skb+0x226/0x4a0 [ 800.654343][T24166] genl_rcv+0x28/0x40 [ 800.658851][T24166] netlink_unicast+0x7bd/0x940 [ 800.664146][T24166] netlink_sendmsg+0x813/0xb40 [ 800.669430][T24166] sock_sendmsg_nosec+0x13a/0x180 [ 800.674976][T24166] ____sys_sendmsg+0x54e/0x850 [ 800.680263][T24166] ___sys_sendmsg+0x2a5/0x360 [ 800.685463][T24166] __x64_sys_sendmsg+0x1b1/0x290 [ 800.690929][T24166] do_syscall_64+0x166/0x520 [ 800.696048][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.702462][T24166] [ 800.702462][T24166] other info that might help us debug this: [ 800.702462][T24166] [ 800.712688][T24166] Chain exists of: [ 800.712688][T24166] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 800.712688][T24166] [ 800.726075][T24166] Possible unsafe locking scenario: [ 800.726075][T24166] [ 800.733563][T24166] CPU0 CPU1 [ 800.738955][T24166] ---- ---- [ 800.744318][T24166] lock(gdp_mutex); [ 800.748218][T24166] lock(cpuhp_state-up); [ 800.755067][T24166] lock(gdp_mutex); [ 800.761485][T24166] rlock(&root->kernfs_supers_rwsem); [ 800.766945][T24166] [ 800.766945][T24166] *** DEADLOCK *** [ 800.766945][T24166] [ 800.775084][T24166] locks held by syz.0.4833/24166: 4, last CPU#0: [ 800.781462][T24166] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.789684][T24166] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 800.798650][T24166] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_del_iface+0x298/0x610 [ 800.808317][T24166] #3: ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 800.817470][T24166] [ 800.817470][T24166] stack backtrace: [ 800.823359][T24166] CPU: 0 UID: 0 PID: 24166 Comm: syz.0.4833 Not tainted syzkaller #0 PREEMPT(full) [ 800.832727][T24166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 800.842786][T24166] Call Trace: [ 800.846069][T24166] [ 800.849003][T24166] dump_stack_lvl+0xe8/0x150 [ 800.853604][T24166] print_circular_bug+0x2e2/0x300 [ 800.858639][T24166] check_noncircular+0x12f/0x150 [ 800.863587][T24166] __lock_acquire+0x164c/0x2de0 [ 800.868444][T24166] ? lockdep_hardirqs_on+0x7b/0x110 [ 800.873659][T24166] ? __pfx___schedule+0x10/0x10 [ 800.878516][T24166] lock_acquire+0x115/0x350 [ 800.883025][T24166] ? kernfs_remove+0x35/0x80 [ 800.887622][T24166] down_read+0x4a/0x330 [ 800.891785][T24166] ? kernfs_remove+0x35/0x80 [ 800.896379][T24166] kernfs_remove+0x35/0x80 [ 800.900799][T24166] __kobject_del+0xe0/0x310 [ 800.905329][T24166] kobject_del+0x45/0x60 [ 800.909578][T24166] cleanup_glue_dir+0x1a3/0x220 [ 800.914435][T24166] device_del+0x77d/0x8f0 [ 800.918771][T24166] ? __pfx_device_del+0x10/0x10 [ 800.923619][T24166] ? pm_runtime_set_memalloc_noio+0x1f5/0x260 [ 800.929746][T24166] ? netdev_unregister_kobject+0x347/0x450 [ 800.935600][T24166] unregister_netdevice_many_notify+0x1be1/0x2140 [ 800.942062][T24166] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 800.948858][T24166] unregister_netdevice_queue+0x2f5/0x340 [ 800.954598][T24166] ? ieee802154_if_remove+0x1b3/0x210 [ 800.960071][T24166] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 800.966322][T24166] ? ieee802154_if_remove+0x1b3/0x210 [ 800.971701][T24166] ? __local_bh_enable_ip+0xd6/0x140 [ 800.976999][T24166] ? ieee802154_if_remove+0x1b3/0x210 [ 800.982381][T24166] ieee802154_del_iface+0x2e2/0x610 [ 800.987591][T24166] genl_family_rcv_msg_doit+0x233/0x340 [ 800.993144][T24166] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 800.999220][T24166] ? bpf_lsm_capable+0x9/0x20 [ 801.003899][T24166] ? security_capable+0x7e/0x2c0 [ 801.008907][T24166] genl_rcv_msg+0x614/0x7a0 [ 801.013431][T24166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.018486][T24166] ? __pfx_ieee802154_del_iface+0x10/0x10 [ 801.024245][T24166] netlink_rcv_skb+0x226/0x4a0 [ 801.029029][T24166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.034057][T24166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.039355][T24166] ? down_read+0x2be/0x330 [ 801.043819][T24166] genl_rcv+0x28/0x40 [ 801.047803][T24166] netlink_unicast+0x7bd/0x940 [ 801.052577][T24166] netlink_sendmsg+0x813/0xb40 [ 801.057346][T24166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.062642][T24166] ? apparmor_socket_sendmsg+0x98/0x360 [ 801.068192][T24166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.073482][T24166] sock_sendmsg_nosec+0x13a/0x180 [ 801.078513][T24166] ____sys_sendmsg+0x54e/0x850 [ 801.083288][T24166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.088582][T24166] ? import_iovec+0x73/0xa0 [ 801.093165][T24166] ___sys_sendmsg+0x2a5/0x360 [ 801.097846][T24166] ? __lock_acquire+0x747/0x2de0 [ 801.102788][T24166] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.107994][T24166] ? tomoyo_path_number_perm+0x219/0x5f0 [ 801.113683][T24166] ? __fget_files+0x2a/0x420 [ 801.118281][T24166] ? __fget_files+0x3a2/0x420 [ 801.122965][T24166] __x64_sys_sendmsg+0x1b1/0x290 [ 801.127997][T24166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.133463][T24166] ? kfree+0x4d/0x650 [ 801.137456][T24166] ? __pfx_kcov_ioctl+0x10/0x10 [ 801.142311][T24166] do_syscall_64+0x166/0x520 [ 801.146905][T24166] ? trace_irq_disable+0x3b/0x140 [ 801.151930][T24166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.158001][T24166] ? clear_bhb_loop+0x70/0xc0 [ 801.162679][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.168576][T24166] RIP: 0033:0x7f1f4079e159 [ 801.172999][T24166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.192618][T24166] RSP: 002b:00007f1f41698028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.201058][T24166] RAX: ffffffffffffffda RBX: 00007f1f40a26090 RCX: 00007f1f4079e159 [ 801.209051][T24166] RDX: 0000000004000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 801.217032][T24166] RBP: 00007f1f4083506b R08: 0000000000000000 R09: 0000000000000000 [ 801.225006][T24166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.232985][T24166] R13: 00007f1f40a26128 R14: 00007f1f40a26090 R15: 00007fff7d8fcbf8 [ 801.240974][T24166] [ 801.245433][ C0] syz_tun: tun_net_xmit 90 [ 801.300409][T24172] 1ªî{X¹¦: left allmulticast mode [ 801.309126][T24172] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4835'. [ 801.316406][T24172] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 801.320551][T24172] 0ªî{X¹¦: entered allmulticast mode [ 801.324695][T24172] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 802.331728][ C0] syz_tun: tun_net_xmit 90 [ 803.360919][ C0] syz_tun: tun_net_xmit 90 [ 804.402590][ C0] syz_tun: tun_net_xmit 90 [ 805.441010][ C0] syz_tun: tun_net_xmit 90 [ 806.481231][ C0] syz_tun: tun_net_xmit 90 [ 807.520969][ C0] syz_tun: tun_net_xmit 90 [ 808.561254][ C0] syz_tun: tun_net_xmit 90 [ 809.600920][ C0] syz_tun: tun_net_xmit 90